Privacy Policy

• Shop owners and staff who create an account and run a shop on MySalonWeb.
• Clients who book an appointment on a shop's site or text a shop's number. For client information, the shop decides what it collects and why; we process it on the shop's behalf.

• Account information: name, email address, password (stored only as a one-way hash), language, and the shop details you enter (name, address, phone, hours, staff, services, prices, photos).
• Sign in with Google or Apple: if you choose it, we receive your name, email address, whether the email is verified, and a provider account ID. We do not receive your Google or Apple password, contacts, files or any other data.
• Booking information: client name, phone number, optional notes, the service, staff member and time chosen.
• Text messages: if a shop turns on the AI receptionist or connects a texting line, we store messages sent to and from the shop's number, the phone numbers involved, photos sent by MMS, and opt-out status (STOP/START).
• Phone calls (shops with a MySalonWeb number): the caller's number, the time, how long the call lasted and whether it was answered. If nobody picks up, the caller hears a greeting and can leave a voicemail after the tone; that voicemail is recorded and transcribed to text so the shop (and its AI receptionist, if enabled) can respond. We do not record two-way conversations.
• Technical data: IP address, browser type and security logs used for rate-limiting and abuse prevention, and essential cookies (see below).

• To provide the service: host shop websites, take and manage bookings, send confirmations and reminders, and run the shop dashboard.
• To sign you in and keep your account secure (password checks, email verification, password reset, suspicious-activity limits).
• For the AI receptionist (only when a shop enables it): to read a client's text or voicemail transcript, check the shop's availability and reply or book on the shop's behalf. Message content is sent to our AI provider (Anthropic) only for this purpose.
• For calls on a MySalonWeb number: to ring the shop's phones and app, keep a call log, store voicemails, and text the caller back when a call is missed.
• For come-back reminders: if a shop turns this on, to text a client once after a chosen number of weeks since their last visit (the client can reply STOP at any time).
• To provide support, fix problems and improve the service.
• To comply with law and enforce our Terms.

We do not sell personal information, we do not use it for advertising, and we do not use client conversations to train AI models.

MySalonWeb's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We request only the basic sign-in scopes (openid, email, profile) and use them solely to create and sign in to your MySalonWeb account. We do not share Google user data with third parties except the service providers listed below that are needed to run the service, and never for advertising.

Only with service providers that process data for us under contract, and only as needed:

• Vercel (hosting, image storage) and Neon (database) — United States.
• Resend (transactional email such as verification and booking emails).
• Anthropic (AI model that drafts receptionist replies and reads voicemail transcripts, when a shop enables the AI receptionist).
• Telnyx (phone numbers, SMS/MMS delivery, call routing, voicemail recording and transcription for shops that use a MySalonWeb number).
• The texting provider a shop connects instead: Quo (OpenPhone) or the SMS Gateway app on the shop's own Android phone.
• Google and Apple (only when you choose to sign in with them).
• Software a shop connects itself through API keys or webhooks (for example its own booking agent) — at the shop's direction.

We may also disclose information if required by law or to protect the rights and safety of our users.

Clients receive texts only from shops they have contacted or booked with. Message frequency varies. Message and data rates may apply. Reply STOP to opt out at any time and START to opt back in. Texts are about the client's own bookings and questions; the only promotional text is an optional come-back reminder a shop may enable, sent at most once per visit cycle. Mobile numbers and SMS consent are never shared with third parties for marketing.

Calls to a shop's MySalonWeb number ring the shop's phones and the owner app. Missed calls go to voicemail: the caller hears a greeting and leaves a message after the tone, which is recorded and transcribed. Recordings and transcripts are kept in the shop's inbox for up to 12 months or until the shop deletes the conversation. The owner app uses the microphone only during a call you place or answer.

We use only essential cookies: a session cookie that keeps you signed in, and short-lived security cookies used during Google/Apple sign-in. We do not use advertising or cross-site tracking cookies.

Data is encrypted in transit (HTTPS). Each shop's data is isolated in the database with row-level security. Passwords are hashed with Argon2id. API keys and texting credentials are stored encrypted (AES-256-GCM) or as one-way hashes. No system is perfectly secure, so please use a strong password and tell us right away if you suspect a problem.

We keep account and shop data while the account is active. A shop owner can delete services, staff, clients, appointments and conversations (including photos, voicemails and transcripts) at any time, and can delete the whole account from the dashboard or the owner app (More → Delete account); we then delete it within 30 days, except where the law requires us to keep records. Clients who want their information removed can ask the shop directly or write to support@mysalonweb.com and we will forward the request to the shop.

You can access, correct or delete your information, and object to or limit some processing. California residents have rights under the CCPA/CPRA, including to know, delete and correct personal information and not to be discriminated against for using them; we do not sell or share personal information for cross-context advertising. To make a request, email support@mysalonweb.com.

MySalonWeb is for businesses and is not directed to children under 13. We do not knowingly collect information from children under 13.

If we change this policy we will update the date above and, for significant changes, notify shop owners by email or in the dashboard.

Questions or requests: support@mysalonweb.com.