Privacy Policy

Last updated: [FILL IN PUBLICATION DATE]

⚠ This is a reference draft meant as a starting point for shops operating in the United States — it is NOT legal advice. US privacy law is state-by-state (e.g. California's CCPA/CPRA gives residents specific rights and, depending on your data volume, may require a "Do Not Sell or Share My Personal Information" link and a formal privacy notice); other states have their own laws. Have a US-licensed attorney review this before publishing, especially if you collect customer data at scale or operate in a state with its own privacy statute.

NailHub ("we," "us") respects your privacy. This policy explains how we collect, use, and protect data when you use the platform — whether you are a salon owner, a staff member/manager, or a customer booking an appointment.

1. Information we collect

Who	Information collected
Salon owner / staff	Name, email, phone number, password (encrypted), shop information (name, address, services, prices), operational data (schedules, wages, revenue, costs)
Customers booking appointments	Name, phone number, email (if provided), booking history, services used
Payments	We do not store card numbers or payment details ourselves — this is handled by our payment processor partners (Stripe, and regionally VNPay/PayOS) under their own privacy policies
Technical	IP address, browser type, activity logs (for security and troubleshooting)

2. How we use data

Operating the booking platform: creating, confirming, and reminding about appointments
Authenticating accounts and securing logins (including two-factor authentication where enabled)
Processing subscription payments
Sending necessary emails: booking confirmations, password resets, email-change confirmations, operational notices
Improving service quality and fixing technical issues

We do not sell personal data to third parties for advertising purposes.

3. Sharing data with third parties

Data is only shared with the partners necessary to run the service, including: server/hosting infrastructure providers, payment processor partners (Stripe, and regionally VNPay/PayOS), and email delivery services. These partners are contractually obligated to protect data under their own policies. We may disclose data if required by law.

4. Data isolation between shops

Each shop on NailHub has fully isolated data at the database level — Shop A's owner cannot access Shop B's customer data or revenue. Only the NailHub Super Admin (system administrator) has platform-wide access, used for operational support.

5. Data security

We apply technical security measures including: password encryption, encrypted connections (HTTPS), limits on failed login attempts, optional two-factor authentication, and periodic data backups. However, no system can guarantee absolute security.

6. Your rights over your personal data

Depending on your state of residence, you may have rights under applicable US privacy law (for example, California residents have rights under the CCPA/CPRA). In general, you can:

Access and review your personal information under "My Account"
Request correction of inaccurate information
Request deletion of your account/personal data (contact us as described in section 9)
Withdraw consent to data collection at any time (this may limit your ability to use certain features)
[FILL IN if applicable to your state: the right to opt out of the "sale" or "sharing" of personal information, and how a resident can exercise it — e.g. a dedicated link or contact method.]

7. Data retention

Data is retained for as long as the account remains active. When a shop/account is deleted on request, related data is removed from the system, [FILL IN: except data required to be retained by law — for example, payment transaction records that federal or state tax/accounting rules require you to keep for a set number of years].

8. Cookies

NailHub uses cookies necessary for login and security (e.g. anti-request-forgery protection). We do not use third-party advertising tracking cookies.

9. Contact about privacy

To exercise the rights above, or with questions about how we handle data, please contact: [FILL IN: privacy/support email].

10. Changes to this policy

This policy may be updated from time to time. Material changes will be communicated by email or on the platform.