Privacy Policy

1. Who we are

SalvaSalon is operated by [Company legal name], [state of incorporation], [postal address] (“SalvaSalon”, “we”). You can reach us at [email protected].

2. Our role

Salons use SalvaSalon to manage their clients, appointments and color formulas. For the information a salon keeps about its own clients, the salon decides what to collect and why, and we process it on the salon's behalf and on its instructions. If you are a salon client, the salon's own privacy notice applies, and requests about your data are best sent to the salon; we help them respond.

We decide how to use the information of salon owners and staff who have SalvaSalon accounts, people who apply to our beta, and visitors to salvasalon.com.

3. What we collect

Account information: your name, email address, password (stored only as a secure hash), language preference, and the salon you belong to. If you sign in with Google, we receive your name and email address from Google.

Information salons enter about their clients: names, phone numbers, email addresses, preferred language, appointment history, allergies and sensitivities relevant to hair services, notes, color formulas and, in a future version, before-and-after photos. Salons choose what to enter.

Beta applications: your name, salon name, email, and the optional details you give us (phone, location, team size, current software, how much of your work is color, language).

Online bookings: when you book with a salon online, the name, mobile number and email address you enter, which go to that salon.

Technical information: IP addresses and request logs, kept for security and troubleshooting. The SalvaSalon app uses a sign-in cookie; salvasalon.com sets no cookies and uses no tracking or advertising tools.

4. How we use it

To provide SalvaSalon: accounts, calendars, client records, formulas, online booking and imports.

To send messages on a salon's behalf, such as booking confirmations, reminders and cancellations, by email and, in the future, by text message (see our SMS Terms).

To keep the service secure, prevent abuse, and fix problems.

To run the beta: to contact applicants who agreed to be contacted, and to learn from beta salons' feedback.

To improve SalvaSalon using aggregated information that does not identify individual clients.

5. Who we share it with

We use these service providers to run SalvaSalon, under contracts that limit their use of the information: Cloudflare (network and security), Amazon Web Services (email delivery and encrypted backups), Google (sign-in, only if you use it), and, when they are enabled, Stripe (payments, through the salon's own account) and Twilio (text messages). If we add AI features, Anthropic will process the data needed for them, and their results are always reviewed by a person before they change anything.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We do not share mobile numbers or text-message consent with third parties for their marketing.

We may disclose information if the law requires it, to protect people's safety or our rights, or as part of a merger or sale of our business, in which case this policy continues to apply.

6. How long we keep it

Salons decide how long to keep their client records while they use SalvaSalon, and can export them at any time.

When a client's data is deleted, we remove or anonymize their personal details. Records a salon must keep for tax and accounting, such as payments, are kept in anonymized form for the period the law requires, generally five to seven years.

Uploaded import files are deleted after 30 days and data exports after 7 days. Beta applications are deleted 12 months after we decline them or hear nothing back. Encrypted backups are kept for up to 35 days.

7. How we protect it

Information is encrypted in transit and backups are encrypted. Each salon's data is isolated from every other salon's at the database level. Access is limited to people who need it, SalvaSalon staff tools require two-step verification, and sensitive actions are recorded in audit logs.

8. Your rights

Depending on where you live, including under the California Consumer Privacy Act, you may have the right to know what personal information is held about you, to get a copy, to correct it, and to have it deleted, and not to be discriminated against for exercising these rights.

If you are a salon client, contact the salon first; we help salons answer these requests. Account holders and beta applicants can write to [email protected]. We verify requests before acting on them.

9. Children

SalvaSalon is not directed to children under 13, and we do not knowingly collect their information except as entered by a salon for a minor client with a parent's or guardian's involvement.

10. Where data is stored

SalvaSalon is hosted in the United States. If you use it from elsewhere, your information is transferred to and processed in the United States.

11. Changes

We will post any changes here with a new “last updated” date and, for significant changes, tell account holders by email before they take effect.