Privacy policy
This page explains what HairSync keeps about you and your clients, why, where it's stored, and what you can ask of us. The short version: we keep what the app needs to work, we never sell it, and you can ask for a copy or delete it at any time.
Who is responsible
HairSync is an independent business based in Quebec, Canada. The person in charge of the protection of personal information is the owner of HairSync. You can reach them at info@gethairsync.com.
What we keep
- Your account: your name and email address, and your password stored as a one-way hash (never the password itself). If you sign in with Google, we receive your name and email from Google.
- Your salon: its name, phone number, time zone and language, who works in it and their role, each stylist's hours, time off, services, lengths and prices.
- What your salon writes down: its clients and their details (name, phone, email, birthday, preferences, hair type, photos), its appointments (client, stylist, services, time, comments), and its notes (what was done, formulas, prices, dates).
- Text reminders: for each reminder, the client's phone number, when it was sent and whether it went through; for a first visit, whether the client confirmed.
- Billing, if your salon subscribes: its billing country and its subscription and payment history. Stripe handles your card; we only receive the card type, its last four digits and its expiry date.
- How the app is used: the type of device, system and browser you sign in from, and a log of actions in your account (for example "added a note"), and where your account came from: the site or app that sent you to HairSync (such as a search engine) and the first page you saw. This helps us fix problems, answer support questions and decide what to improve.
- The newsletter: your email address, if you sign up. You can unsubscribe at any time.
- Homepage visits: to greet visitors with a line about their country, your IP address is sent to an IP location service and the result is kept for a day. Our server logs also record IP addresses for security, such as blocking automated sign-ups.
Your clients' information
Your salon decides what it notes about its clients. We keep it on the salon's behalf, only to show it to the people who work there and to send the salon's text reminders. A client only ever hears from us through those reminders: a text the day before an appointment, with a link to confirm a first visit. We never contact them for anything else or use their information for anything else. As with a paper card file, you're responsible for having your clients' permission to keep their details and photos.
What we don't do
- We don't sell or rent personal information.
- We don't use it for advertising, and we don't use advertising or tracking cookies.
- We only look at your data to run the service, fix problems or answer you.
Where it's stored and who helps us
Your information is stored in Canada and the United States, so some of it is kept outside Quebec. A few trusted providers handle it for us, only to provide their part of the service:
- Hosting: the server that runs the app and its database.
- Cloud storage: photos and database backups.
- Payments: Stripe, if your salon subscribes. The subscription is sold through Link, a Stripe service, which also uses your name, email and billing address under its own privacy policy as the seller.
- Email delivery: sending emails such as password resets.
- Text messages: Twilio sends the text reminders. It receives the client's phone number and the reminder's text (the salon, the day and the time).
- Sign-in: Google, if you choose "Sign in with Google".
- IP location: the country of homepage visitors, from their IP address.
- Reading imported lists: an AI service, only if you import a client list from photos. It reads the names, phone numbers and emails in the photos you choose. We delete the photos once they are read.
Cookies
We only use the cookies the app needs to keep you signed in, remember your language and protect forms against forgery. No analytics or advertising cookies.
How long we keep it
- As long as your account exists.
- Clients read from an imported list that you haven't added yet are kept for 7 days.
- When you delete your account from your profile, it's deleted right away. If you were the only person in your salon, the salon goes with it: its clients, appointments, notes and photos. They're gone from our backups within a few days.
- Stripe keeps payment records for as long as the law requires.
Your rights
You can ask us at any time to:
- see the personal information we have about you, and get a copy of it;
- correct anything that's wrong;
- delete it, or withdraw your consent to a use of it.
Email info@gethairsync.com and we'll answer within 30 days. If you're not satisfied with our answer, you can contact the Commission d'accès à l'information du Québec.
Security
Everything travels over HTTPS, passwords are hashed, and access to the servers is tightly restricted. If a security incident ever puts your information at risk of serious harm, we'll tell you and the Commission d'accès à l'information as the law requires.
Changes
If we change this policy in a way that matters, we'll email you before the change applies. The date at the top always shows the latest version.