Guest & Participant Terms

If you received an email from Lonzo about someone else's meeting, this page is for you. You do not have an account with us, you did not sign up for anything, and you are not on a marketing list. This page explains who we are, where we got your email address, what we do with what you send back, and how to make the contact stop — permanently, with one click.

The Service is operated by Vista del Lago Software LLC, a Delaware limited liability company, of 18381 Vista del Lago, Yorba Linda, CA 92886, USA, which offers it under the Lonzo name. Data-protection contact: privacy@lonzo.ai.

---

1. What these Terms are, and who they bind

These Guest & Participant Terms (the "Terms") govern your interaction with Lonzo (the "Service," "we," "us," "our") as a participant in someone else's meeting coordination — not as an account holder. If you hold your own Lonzo account, the Terms of Use and Privacy Policy govern that relationship in addition to these Terms.

In these Terms:

• "Organizer" means the Lonzo account holder who is trying to schedule a meeting and on whose behalf the assistant acts. The Organizer is the human authority for the outreach; the assistant is an automated agent operating under the Organizer's direction and cannot send you anything the Organizer has not asked it to arrange.
• "Participant" means any person the assistant contacts by email to collect availability for the Organizer's meeting, whether or not that person ever responds.
• "Guest" means a Participant who has opened the link we sent and thereby activated a scoped session (Section 3). Every Guest is a Participant; not every Participant becomes a Guest.

These Terms bind you as a Participant and, if you open the link, as a Guest. They do not purport to bind the Organizer, whose obligations to you are a matter between you and the Organizer.

2. Email only

The Service sends no SMS or text messages. Everything described here concerns email. If we later add a text-messaging channel, it will carry its own terms and its own consent requirements, and this page will say so before it does.

3. Your guest identity: no account, key-bound, single task

The link we send you is of the form /g/<token>. Opening it creates a deliberately minimal identity, and its limits are the point:

• No account, no login, no password. You are not signing up. There is no username or password and nothing to "recover." Your identity for the session is bound to a cryptographic key your browser generates and holds, and to the specific link you opened.
• Single task, view-and-respond only. Your session is scoped to one coordination. Within it you may see the meeting details the Organizer chose to share and submit or update your availability. You cannot reach any other coordination, the Organizer's account or mailbox, another Participant's response, or any account surface of the Service.
• Not portable. The identity confers no ownership and no continuing relationship, and it is not transferable to another device or person. If you lose the link, or the browser key it is bound to, a new link has to be issued.
• The link expires after 7 days. After that, opening it grants nothing and the Organizer must have a new one issued.

One link per participant per coordination. If the assistant needs to follow up with you about the same meeting, it reuses the link it already sent rather than minting a second one, so an old message and a new one point at the same place.

If you already have a Lonzo account under the address the Organizer used, you do not get a guest link at all — you get an ordinary authenticated link and respond as yourself.

4. What we hold about you, where it came from, and why (GDPR Article 14 notice)

Because your details reached us from someone else rather than from you, Article 14 of the GDPR (and analogous laws) requires us to tell you specific things without your having to ask. This section is that notice. The same points, in short form, appear on the page the link opens.

Data	Source	Why we have it
Your name and email address	The Organizer — from the Organizer's Google Contacts and mailbox, which the Organizer connected to the Service. Not supplied by you to us.	To reach you about the Organizer's meeting and to relay the outcome.
A one-way hash of your email address	Derived by us from the address above	Held in the guest-link record instead of the address itself, so that link can be matched to you and to your opt-out without the record being a directory of contact details.
A key generated by your browser	Your device, when you open the link	To bind your session and authenticate your submissions without an account or password.
Your availability response	Submitted by you through the link	To relay to the Organizer for this meeting (Section 5).
Session and technical data	Generated while you use the link	The link token, timestamps, and the IP address of the session — to operate and secure the session and to expire it on schedule.
Delivery and opt-out signals	Our email provider, and you	To know whether a message reached you, and to stop sending if you opt out or report a message (Section 7).

Controller. Vista del Lago Software LLC acts as a controller for the outreach and the guest session described here, alongside the Organizer, who is a controller of their own contact list and mailbox. Our EU/UK Article 27 representative designation is in progress and is not yet complete; until it is, write to privacy@lonzo.ai and we will handle the request directly rather than routing it.

Purpose, and the limit on it. Your details are used only for the transactional coordination purpose — contacting you about, and collecting and relaying your availability for, the Organizer's specific meeting. We do not send you marketing, we do not add you to any list of ours, we do not sell or share Participant data, and we do not use your address to create an account for you. Our own commitment on this point is in the Acceptable Use & Anti-Spam Policy, Section 5.3.

Legal basis. Our legitimate interests, and the Organizer's, in arranging a meeting with someone the Organizer already has a relationship with — balanced against your rights, and resting on the Organizer having a lawful basis to share your details with the Service in the first place. The Organizer's obligation to have that basis is a term of their agreement with us (Acceptable Use & Anti-Spam Policy, Section 5.2), not a courtesy. Your right to object to processing on this basis is in Section 6, and an objection is honored as an immediate and permanent opt-out.

Retention. Set out in Section 8.

5. Your response goes to the Organizer

Any availability you submit is shared with the named Organizer so they can schedule the meeting. It is not shown to other Participants in the same meeting. The page you submit it on says so before you type. Please do not put anything in the availability box that you would not want the Organizer to read.

6. Your rights, and how to use them

Subject to applicable law, you may have the right to access, correct, or delete the personal data we hold about you for this coordination, to object to or restrict its processing, to receive a copy of it, and to stop further contact. Because you have no account and no login, we keep the path short:

• To stop hearing from us, use the mechanisms in Section 7. That is immediate and permanent and needs no explanation from you.
• For anything else — access, correction, deletion, objection, restriction, or a copy — write to privacy@lonzo.ai. There is no self-service control for this, because you have no account to hold one; a person handles it. We aim to respond within the time applicable law allows, and within 30 days where no shorter period applies.
• Because your address is held in the guest-link record only as a hash, we may need you to tell us which coordination you mean — forwarding the message you received is the easiest way.

We action these requests ourselves for the outreach and the guest-session data, rather than only telling you to go to the Organizer. For data the Organizer independently controls — their own address book, their own mailbox, and the record of the meeting in their account — you may also need to ask the Organizer, and we will tell you so plainly rather than leaving you between two parties.

You are not required to respond to anything. Ignoring the message is a complete answer, and we place no consequence on it.

7. How to stop hearing from us

Every coordination message we send you carries all of the following, and none of them can be turned off by the Organizer:

• a visible unsubscribe link in the footer;
• a List-Unsubscribe header, which many mail apps surface as a one-click "unsubscribe" button;
• a unsubscribe+<token>@lonzo.ai address you can simply reply to or write to;
• a line naming the Organizer on whose behalf the message was sent, because the sender address is ours and not theirs; and
• our physical postal address.

An opt-out is checked before every send, is permanent, and is not limited to the meeting that prompted it — once you opt out, that address stops receiving coordination mail from that Organizer's account, not just from that one thread. Separately, if you report one of our messages as spam, our email provider adds the address to a suppression list that stops the entire Service from sending to it.

"Wrong person." If you reply that you are the wrong person — "wrong number," "not me," "I don't know this person," or anything to that effect — we treat it as an immediate opt-out and stop contacting the address, without asking you to prove anything.

About the record we keep of your opt-out. Honoring an opt-out means remembering it, so we keep a small record — the address and the fact that it opted out, nothing more — and we keep it indefinitely and on purpose. Deleting that record is precisely how sending would silently resume, which is why it survives even the deletion of the Organizer's account. This is the one thing we will not delete on request, and the Data Retention & Deletion Policy explains it in the same terms. If you would rather we hold nothing at all, tell us and we will explain the trade-off before doing anything.

These messages are not marketing, and we do not treat them as such: they are transactional coordination for one meeting, initiated by the Organizer. Even so, they carry the full set of elements above, and an opt-out is honored before the next send rather than within the ten business days CAN-SPAM would allow.

8. How long we keep it

We want to be straight about this rather than quote a number we do not enforce.

• The guest link and its record expire 7 days after issue (Section 3). The expired record is retained no longer than needed to keep an expired link from being reused and to answer a dispute about the coordination.
• Your name, address, and availability response live inside the Organizer's account data, because that is what they are — the Organizer's record of a meeting they arranged. They are removed when the Organizer deletes that record, and they are removed when the Organizer's account is deleted, on the schedule and with the limits described in the Data Retention & Deletion Policy. They are also within reach of a deletion request you make to us under Section 6.
• There is currently no automated sweep that deletes inactive Participant data on a fixed schedule. We are not going to promise one before it exists. Until it does, we keep this data only as long as the coordination purpose and our legal obligations require, and a request under Section 6 is the reliable way to have it removed sooner.
• Opt-out and suppression records are kept indefinitely, for the reason given in Section 7.
• Technical and delivery logs age out on the bounded schedule in the Data Retention & Deletion Policy.

9. If you decide to create your own account

You may, but nothing here pushes you to, and declining costs you nothing.

• Creating an account always creates a new, separately verified account. It is never an in-place upgrade of a guest identity, and a guest identity is not a thing that can be "converted."
• The new account is governed by the Terms of Use and Privacy Policy, which you agree to separately, and by the Subscription & Billing Terms if you subscribe.
• Nothing about your participation is silently merged into a pre-existing identity.

10. Acceptable use by Guests

Even in a scoped session, you agree not to: impersonate anyone or misrepresent who you are; submit unlawful, abusive, harassing, or infringing content in an availability note or any other free-text field; probe, scan, attack, overload, or try to circumvent the guest endpoint or its access controls; use automated means to scrape or harvest from the Service; or use the link for anything other than responding to the Organizer's request. We may suspend or revoke a session for a violation, or where we reasonably believe revocation is needed to protect the Service, the Organizer, or others.

11. Children

This feature is meant for adults, and we do not knowingly direct outreach to children. We recognize the structural problem honestly: Participant addresses come from an Organizer's address book, so a first message can reach a minor before anyone has represented anything about age — and no checkbox after the fact cures that. So:

• We do not rely on a "you represent that you are an adult" click to legitimize having contacted you.
• On any indication that a recipient is a child — from a reply, from the Organizer, or from anywhere else — we suppress the address and stop contacting it, on the same before-every-send basis as an opt-out.
• We do not knowingly continue outreach to a person we understand to be a child.

If you believe we have contacted a child or hold a child's data, write to privacy@lonzo.ai and we will suppress the address and delete what we hold.

12. Disclaimers

The Service, including the guest link and the coordination features, is provided to you "AS IS" and "AS AVAILABLE," without warranties of any kind, whether express, implied, or statutory, including any implied warranties of merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the Service will be uninterrupted, timely, secure, or error-free, or that any message will be delivered. Some jurisdictions do not allow the exclusion of certain warranties, so some of these exclusions may not apply to you.

13. Limitation of liability

To the maximum extent permitted by law, we will not be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for any loss of data, profits, or goodwill, arising out of or relating to your use of the Service as a Participant or Guest, even if advised of the possibility of such damages. Our total aggregate liability arising out of or relating to these Terms will not exceed US $100. Nothing in this Section limits liability that cannot be limited under applicable law, including liability for death or personal injury caused by negligence, for fraud, or for any other liability a mandatory consumer-protection rule in your country of residence does not permit us to exclude. This Section survives termination.

14. Changes; governing law; disputes; survival

• Changes. We may update these Terms. If we make a material change we will update the effective date and version above, and — where it is practical to do so — indicate the change on the guest page. Continued use of the link after an update means you accept the updated Terms.
• Governing law and venue. These Terms are governed by the laws of the State of Delaware, USA, without regard to conflict-of-laws rules, and the courts located in New Castle County, Delaware have jurisdiction. Nothing here deprives a consumer resident in the EEA, the UK, or Switzerland of the protection of mandatory consumer-protection provisions, or of the right to bring proceedings in their country of residence.
• No arbitration, no class-action waiver. These Terms do not impose binding arbitration or a class-action waiver on you. You never signed up for an account and you pay us nothing; we do not think it is right to compel a non-contracting party into arbitration, and we have not. This differs deliberately from the account-holder Terms of Use, which does contain an arbitration agreement.
• Survival. Sections 4, 6, 7, 8, 10, 12, 13, and this Section 14 survive the expiry of your link or session.

15. Contact

Vista del Lago Software LLC 18381 Vista del Lago, Yorba Linda, CA 92886, USA

• Participant privacy and data rights: privacy@lonzo.ai
• General questions: support@lonzo.ai
• Abuse or unwanted contact: abuse@lonzo.ai

Messages the assistant sends on an Organizer's behalf come from an address on lonzo.ai and name the Organizer as the human authority for the coordination.

---

All legal documents · Help · Lonzo home