1. Information We Collect

We collect information you provide directly to us when you create an account, use our services, or communicate with us. This includes:

Account information (name, email, password)
Business information (business name, address, phone number)
Client data you choose to store in our system
Payment information (processed securely through Stripe)
Usage data and analytics

2. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our services
Process transactions and send related information
Send technical notices, updates, and support messages
Respond to your comments and questions
Analyze usage patterns to improve user experience
Prevent fraud and enhance security

3. Data Security

We use technical and organizational measures designed to protect your information:

All data is encrypted in transit using TLS/SSL
Payment information is handled by PCI-compliant processors
Access controls are designed to limit business data to the authenticated account that owns it
We test security-sensitive application changes before they are released through our deployment process

4. Data Sharing

We do not sell your personal information. We only share data with:

Service providers who help us operate our platform (e.g., hosting, analytics)
Payment processors to facilitate transactions
Law enforcement when required by law

5. Your Rights

You have the right to:

Access and update the account and business information you provide
Download your business data in a machine-readable format from Settings > Data & Privacy
Opt-out of marketing communications
Request deletion of your account and associated data

6. Cookies and Tracking

We use cookies and similar tracking technologies to improve your experience, analyze usage, and deliver personalized content. You can control cookies through your browser settings.

ChairBoss uses Vercel Web Analytics and Vercel Speed Insights only on approved product and public page templates to understand aggregate traffic, feature adoption, and performance. ChairBoss's application payload contract limits the ChairBoss-provided route and action fields to redacted page templates and static, zero-property product action names. We do not send ChairBoss account, customer, business, booking, payment, or order identifiers; names, email addresses, phone numbers, business names, details, or amounts; user content or message text; or raw route values, slugs, URL query strings, or fragments.

Separately, Vercel's Web Analytics and Speed Insights services process Web Vitals and other performance measurements, along with anonymous technical dimensions, as described in their official Web Analytics privacy policy and Speed Insights privacy policy. In particular, Vercel's Web Analytics policy describes using a hash derived from an incoming request to distinguish unique visitors. Those notices describe Vercel's handling of its service data.

When you visit a public booking or store page, ChairBoss records aggregate, first-party analytics — such as that the page was viewed and that a booking or order was completed — so the salon can see whether shared links bring in business. These records contain no customer identity data (no name, email, phone, or payment details), are stored only in the salon's own account, and are kept for 90 days. No cookies are used for this measurement. If your browser sends Do Not Track or Global Privacy Control, no visit or funnel event is recorded.

Vercel observability is separate from that first-party, 90-day funnel measurement; it is not used for tenant reporting, billing, authorization, or payment or booking records. If your browser sends Do Not Track or Global Privacy Control, ChairBoss suppresses Vercel analytics and performance callbacks as well.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide services. If you request deletion, we will verify and process the request subject to legal, accounting, fraud-prevention, and other applicable retention requirements.

8. Children's Privacy

Our services are not intended for children under 18. We do not knowingly collect information from children under 18.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with applicable laws.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by email or through a notice on our platform.

Contact Us

If you have any questions about this privacy policy or our data practices, please contact us at privacy@chairboss.com

Privacy Policy