SalonCue

Privacy Policy

Last updated: September 14, 2026

Toàn bộ chính sách bảo mật hiện được trình bày bằng tiếng Anh. Vui lòng liên hệ daniel@autosender.app nếu bạn cần hỗ trợ bằng tiếng Việt trước khi sử dụng dịch vụ.

SalonCue ("we", "us", "our", or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web platform (collectively, the "Service").

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Service. By accessing and using SalonCue, you acknowledge that you have read, understood, and agree to be bound by all the provisions of this Privacy Policy.

What Information We Collect

Phone Number & Identity Information

Your phone number is the primary identifier for your account and customer identity. We collect and store your phone number to authenticate you, identify you in our system, and send transactional messages (OTP, receipts, wait time notifications).

Salon & Business Information

Salon owners provide salon name, address, phone number, email, business license, and Stripe Connect account information. Technicians provide their name, role, and commission preferences.

Transaction Data

We collect and store all transactions including: services performed, pricing, discounts applied, tips, payment method (cash/card/gift card), customer names, technician assignments, and timestamps.

Customer Information

For customers, we collect phone number, name (optional), service history, loyalty points balance, visit frequency, and total amount spent.

Gift Card Purchase Information

When you purchase a gift card online, we collect the purchaser email address, gift-card amount, recipient name if provided, selected language, and transaction status. We use this information to complete the purchase and deliver the gift-card receipt and redemption code.

Device, Session & Push Information

We collect an app installation identifier, authenticated session identifiers, device platform and app version, and—if you enable notifications—a push token. We use this information to secure mobile access, keep one selected salon context, deliver private generic notifications, retire lost or signed-out devices, prevent abuse, and troubleshoot service reliability. We do not use it for advertising or cross-app tracking.

Connection, Performance & Security Logs

Our hosting and authentication providers retain technical request logs that may include IP addresses, approximate city or region derived from IP addresses, app and operating-system versions, request paths, response times, and error or security details. Signed-in requests may be linked to account or session identifiers. We use these records to operate and secure the service, investigate failures, and improve reliability and performance. The mobile app does not request GPS location, and we do not use these records for advertising or cross-app tracking.

Mobile Work Information

The employee mobile app receives assigned appointment and service information and may submit approved work actions such as visit status, catalog add-ons, service notes, requested service changes, and time-off requests. It may also display the signed-in employee's schedule and permitted earnings information. SalonCue does not use this information for advertising.

Employees who submit a time-off request may choose a health-related reason, such as Sick or Doctor, and may add an optional note. These reasons and related notes may contain health information. We collect them with the employee's request and share them with the salon staff authorized to review time off so they can manage the request and staffing. The app does not access HealthKit or provide medical advice.

What We Never Store

For your security, we never store or have access to:

  • Credit/debit card numbers — Stripe processes all card payments securely
  • CVV/Security codes — PCI compliance requires Stripe handle this
  • Social Security Numbers (SSNs) — Not required for our Service
  • Bank account numbers — Only Stripe holds these for payouts
  • Biometric data — We do not collect fingerprints or facial data
  • Passwords — Staff mobile passwords are stored only as secure hashes by our authentication provider; SalonCue cannot read them

How We Use Your Information

We use the information we collect to:

  • Authenticate and authorize access to the Service
  • Process transactions and manage invoicing
  • Calculate and manage commission splits and payroll
  • Send transactional SMS messages (receipts, OTP, wait times)
  • Send transactional email receipts for online gift-card purchases
  • Generate reports and analytics for salon owners
  • Maintain turn board and queue management
  • Send marketing messages (only with consent)
  • Improve our Service and customer experience
  • Comply with legal obligations and prevent fraud

SMS / Text Messaging Program

SalonCue sends appointment text messages to customers of the salons using our platform. This section describes that program.

What messages you may receive

Appointment confirmations, appointment reminders, and cancellation notices for the salon you booked with or visited. Message frequency varies based on your appointments. Message and data rates may apply.

How you opt in

You opt in by checking the SMS consent box when you book online or check in, where you agree to receive appointment text messages from SalonCue about your appointments at that salon. We keep a record of when and how you opted in.

How you opt out or get help

Reply STOP to any message to unsubscribe from all appointment texts, including reminders. Reply START to resubscribe, or HELP for assistance. You can also contact us using the details below.

We do not share your opt-in

We do not sell or share your mobile phone number or your SMS opt-in consent with third parties or affiliates for their own marketing or promotional purposes. Your phone number is shared only with our SMS delivery provider (Telnyx) for the sole purpose of sending the messages you requested. Mobile carriers are not liable for delayed or undelivered messages.

Data Retention

Transaction & Financial Records

Salon-owned transaction and financial records, including invoices, commissions, payroll history, and payment records, remain part of the salon's business records when a personal login is deleted. Retention depends on the salon's authorized business needs, applicable legal obligations, and the records and backups it maintains. Closing a SalonCue account does not automatically erase the salon's operational database on its computer.

Account Data After Cancellation

Deleting a personal SalonCue login removes that login and its account access. It is separate from closing a salon business account or deleting salon-owned operational and financial records. For salon business account closure, contact daniel@autosender.app to identify the applicable export, billing, provider, device, and data-retention steps.

Customer Data

Deactivating a customer keeps the salon's customer profile and history available for authorized review and reactivation. Deactivation alone does not automatically erase the customer's name, phone number, or other operational records. Contact the salon or daniel@autosender.app about a personal-data deletion request; the records that can be removed depend on the request, the salon's responsibilities, and applicable requirements.

Mobile Sessions & Push Routing

Mobile session and installation records are retained only while needed for authentication, security, access history, and abuse prevention. Active push leases expire within 24 hours unless renewed. Raw push tokens are removed when the exact session is signed out or revoked, access ends, an account is deleted, or the provider reports that the device is no longer registered. Security and delivery records may be retained for a limited period to investigate failures or misuse.

Retention of provider and security records varies by service, purpose, and applicable business or legal requirements. Account closure does not automatically erase every provider record or backup.

Your Privacy Rights

Depending on your location, you may have the following rights:

Right to Access

You have the right to request a copy of all personal data we hold about you.

Right to Export

You can export your transaction data and customer information in a machine-readable format.

Right to Delete

Subject to legal obligations (like tax record retention), you can request deletion of your data. We will comply within 30 days.

Right to Opt-Out

You can opt out of any text message at any time by replying STOP. See the SMS / Text Messaging Program section above for full details.

SMS Opt-Out

Reply "STOP" to any text message to unsubscribe from all SMS, including appointment reminders. Reply "HELP" for assistance. Opt-out requests are honored immediately.

Data Security

We implement industry-standard security measures to protect your data, including:

  • HTTPS encryption in transit
  • Row-Level Security (RLS) at the database level for multi-tenancy
  • Environment-classified recovery controls and tested local backup tools for the authoritative salon database; backup availability and retention depend on the deployed service tier and documented recovery policy
  • Phone/password authentication for staff, owner-issued recovery codes, and phone OTP where used for customer authentication
  • PCI-DSS compliant Stripe integration for payment processing

However, no security system is impenetrable. While we strive to protect your data, we cannot guarantee absolute security.

Third-Party Sharing

We do not sell your data. We only share information with trusted third parties as necessary:

  • Stripe — Payment processing (card details never touch our servers)
  • Telnyx — SMS delivery for appointment and transactional messages (phone numbers only, solely to deliver your messages)
  • Supabase — Cloud database and authentication infrastructure
  • Expo and platform push services (Apple Push Notification service and Google Firebase Cloud Messaging) — Device-token registration and delivery of generic mobile notifications when notifications are enabled
  • Resend — Delivery of online gift-card receipts using the purchaser email address and receipt content, including the salon, amount, recipient name if provided, gift-card code, and image link
  • Cloudflare Turnstile — Automated-abuse prevention on customer sign-in when that protection is enabled
  • Vercel — Hosting for public web pages and authenticated cloud gateways
  • Law enforcement — When required by legal process

International Data Transfers

Our Service is hosted in the United States. By using SalonCue, you consent to the transfer of your information to the U.S., which may have different data protection laws than your country of residence.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of the Service constitutes your acceptance of the revised Privacy Policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: daniel@autosender.app

Company: SalonCue (operated by Daniel Nguyen)