Privacy Policy

Two kinds of people, two roles

BeautyOS serves beauty businesses. Those businesses serve their own clients. When a salon stores a client record in BeautyOS, the salon decides what is collected and why; BeautyOS processes it on the salon’s instructions. When you sign up for BeautyOS as a business, we are responsible for your account information directly.

If you are a client of a business that uses BeautyOS and want your information corrected or deleted, contact that business first. We will support them in acting on your request.

What we collect from businesses

To operate your account we collect:

• Account details: name, email, phone, business name and address
• Billing information, processed by our payment processor — we do not store full card numbers
• Content you upload: photos, service descriptions, prices, website copy
• Usage and diagnostic data: pages visited, features used, errors encountered

What businesses store about their clients

A business may store contact details, appointment history, service notes, formulas, sensitivities, photographs and consent records. This information belongs to that business and is visible only inside it.

It is never shown on a public website, the Style Wall, or the marketplace. It is never sold. It is never used to advantage a different business.

Location

The consumer app can show nearby professionals. Precise location is requested explicitly and used only for that search. It is never collected in the background, and declining still lets you search by city or postal code.

What we never do

These are commitments, not defaults you have to find and switch on:

• We do not sell personal information
• We do not infer race, ethnicity, health status or identity from photographs, names or locations
• We do not use client photographs to train models without explicit permission
• We do not share one business’s client list with another
• We do not track precise location silently

Service providers

We use third parties to run the service: cloud hosting, payment processing, email and messaging delivery, domain registration, and AI model providers. They receive only what they need to perform their function and are bound to protect it.

Security

Data is encrypted in transit and at rest. Access to production systems is limited and logged. Credentials for connected accounts are encrypted before storage. Administrative actions are recorded in an audit trail.

Retention

We keep account data while your account is active and for a limited period afterwards so it can be restored, then delete it. Financial records are kept as long as tax and accounting law requires.

Your rights

Depending on where you live, you may have the right to access, correct, export, delete or restrict the processing of your personal information, and to object to certain uses. Requests can be sent to privacy@beautyos.com.

Changes

We will announce material changes to this policy before they take effect.