Privacy Policy

1. Information We Collect

We collect information that you provide directly to us, including:

• Name, email address, and contact information
• Business information (salon name, location, services)
• Client data you enter into the system
• Payment information (processed securely through our payment partners)
• Usage data and analytics

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send technical notices and support messages
• Respond to your comments and questions
• Analyze usage patterns and trends
• Detect and prevent fraud and abuse

3. Data Security

We implement industry-standard security measures to protect your data, including encryption at rest and in transit, regular security audits, and strict access controls. However, no method of transmission over the internet is 100% secure.

4. Data Sharing

We do not sell your personal information for monetary consideration. We may share your information with:

• Service providers who assist in our operations
• Payment processors for transaction handling
• Analytics providers
• Advertising providers such as Meta, Google, and TikTok, through the advertising and analytics technologies described in Section 6
• Legal authorities when required by law

Under the California Privacy Rights Act, our use of advertising technologies may constitute "sharing" personal information for cross-context behavioral advertising. To opt out, contact us at the address below.

5. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your data
• Opt-out of marketing communications

6. Cookies, Analytics & Advertising

We use cookies and similar technologies to enhance your experience, analyze usage, and personalize content. You can control cookie preferences through your browser settings.

We also use analytics and advertising technologies on the Service and on the public pages we host for our customers — salon and stylist landing pages, public profile pages, and booking pages. These include pixels provided by Meta (Facebook and Instagram), Google (Google Analytics, Google Ads, and Google Tag Manager), and TikTok. They set and read cookies and transmit information about your visit to those providers, including your IP address and browser user agent. Where you submit a form or complete a booking, we may also transmit a one-way cryptographic hash of the contact details you provided to Meta through its Conversions API so the conversion can be matched to an advertisement.

Salons, stylists, and educators who use the Service may configure their own advertising accounts on their own public pages. Where they do, that business — not Hairvana — determines the purpose of that collection and is responsible for it. We also operate our own analytics and advertising technologies across public pages hosted on the Service. We do not currently present a consent banner before these technologies load.

7. Google User Data

Educators may connect a Google Calendar account so that their scheduled course sessions appear in the calendar they already use, and so that their existing commitments appear alongside those sessions inside Hairvana. Connecting is optional, and nothing below happens unless an educator explicitly grants access.

What we access

• The list of calendars in the connected account, so the educator can choose which one receives their sessions and which ones are checked for clashes.
• Events on the calendars the educator selects, so we can show when they are already busy.
• The email address of the connected Google account, shown so they know which one is connected.

How we use it

• To create and update calendar events for the educator’s own course sessions.
• To display existing commitments on the educator’s schedule as read-only entries, and to warn them before they schedule a class over one.

What we store, and for how long

• An encrypted Google access and refresh token, so syncing can continue without asking again.
• The calendars the educator chose, and the timezone of the calendar they write to.
• For each imported event: its title, start and end time, and whether it is all-day. We keep only a rolling window around the present date and delete entries outside it.
• The identifiers of the events we ourselves created, so a session that is edited or cancelled can be updated or removed rather than duplicated.

What we never do

• We do not sell Google user data, and we do not use it for advertising or profiling.
• We do not share it with other users of the Service. Imported events are visible only to the educator whose account they came from.
• We do not add students or any other person as an attendee on events we create, and we do not send student information to Google.
• Google Calendar can never change a Hairvana booking. Data flows out of Hairvana as events, and in only as read-only busy time.
• No human reads this data, except where an educator asks us to for support, or where it is necessary for security or to comply with the law.

Artificial intelligence and machine learning

Google user data is never sent to any artificial intelligence or machine learning service, whether operated by us or by a third party. It is never used to create, train, retrain, fine-tune or improve any generalized or foundational model, and it is never used to personalize a model for us or for anyone else. That covers the data as we receive it and anything derived from it, including aggregated or anonymized forms. Hairvana does use third-party AI providers for other features, such as drafting marketing copy and generating images for a landing page; those features receive no calendar events, no calendar identifiers and no information about the connected Google account.

Removing access

An educator can disconnect at any time from their calendar settings in Hairvana, which deletes the stored tokens, the imported events and the links to events we created. Access can also be revoked from the Google Account permissions page at myaccount.google.com/permissions. Events we previously created are left in place, because they are the educator’s own schedule.

Hairvana’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Contact Us

If you have questions about this Privacy Policy, please contact us at privacy@hairvana.io