Privacy Policy

This Privacy Policy explains how Elegant Image ("Elegant Image," "we," "us") collects, uses, and protects information when you use our website and app at elegant-image.floorcraft.dev and our salon services (the "Services"). We run a styling salon, so we handle information about children with particular care: it comes to us from parents, and parents stay in control of it.

Effective August 6, 2026. This policy describes how the app works today.

What we collect, and from whom

From you (the account-holding adult). Your name, email address, and optionally your phone number when you create an account; your typed signature and the version of each consent document you accept or decline, with the date, IP address, and device, kept as an audit trail; messages you send us; and your payment activity (see Payments below).

About your clients, provided by you. You, not the client, tell us eachclient's name and birthdate. Clients under 18 never have their own login. As yourclients participate, we build salon records about them: bookings, QR check-in and check-out attendance, appointment history, and stylist notes. If you accept the optional Photo and Video Release, photos and videos of your clients taken during appointments are also covered records; if you decline, we make reasonable efforts not to feature you (see Photos and media).

Collected automatically.Sign-in and security logs; first-party product analytics events (for example "appointmentbooked"), stored in our own database and never shared with advertisers; a cookie remembering your language; and, on your first visit, a cookie recording how you found us (for example a flyer code or the referring site), which stores marketing-source labels only, no personal details. We use no third-party ad trackers, no advertising pixels, and no cross-site tracking.

Payments. Card payments are processed by Stripe. Your card number never touches our servers: Stripe stores the card and gives us a secure token plus the card brand and last four digits. We keep our own records of charges, salon balance, and gift-card activity.

Why we use it

• To run the salon: appointments, scheduling, and check-in.
• To bill accurately: charges, salon balance, and receipts.
• To keep each client's history and help stylists prepare for appointments.
• To send service messages: reminders, confirmations, receipts, and account notices.
• To keep the Services secure and comply with legal obligations.

We do notsell personal information, and we do not share it with third parties for their own marketing. That includes children's information and phone numbers.

Who processes data for us

We use a small set of service providers. Each processes data only on our behalf, to provide its service:

• Clerk (authentication): your login email, name, and sign-in security.
• Stripe (payments): card details and payment processing. Card numbers are held by Stripe, never by us.
• Neon (database): hosts our application database, where salon records live.
• Vercel (hosting): runs the website and app.
• Resend (email): delivers the emails we send you.
• Twilio (text messaging): delivers texts, only if you opt in to SMS.
• Printify (merchandise fulfillment): if you order merch shipped to you, we share the ship-to name and address needed to print and deliver it.
• AI drafting providers(Anthropic or OpenAI): when a staff member uses the app's drafting assistant to compose a reply to you, the relevant conversation text is sent to the provider to generate a suggested draft, which a human reviews and edits before anything is sent. We do not use your data to train models, and we do not send payment details to these providers.
• Google Calendar (optional calendar sync): if a stylist or salonchooses to connect their Google Calendar, Floorcraft adds, updates, and removes only theappointmentsbooked in Floorcraft (each tagged as Floorcraft-managed) on that calendar, and reads existing calendar busy times solely to prevent double-booking. We do not read, store, share, or modify calendar events that Floorcraft did not create beyond this availability check. Connecting is optional and can be disconnected at any time, which stops all further access. Floorcraft's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Beyond these providers, we disclose information only when required by law, to protect the rights and safety of clients, staff, and the public, or as part of a business transfer (merger, acquisition, or sale of assets), in which case this policy continues to apply to it.

Children's privacy

We serve minors as well as adults, and the design follows from that. Children do not create accounts, do not have logins, and do not submit information to us directly; everything we hold about a clientunder 18 is provided by their parent or legal guardian, under that parent's consent, or generated by the salon in the course of serving them (attendance, appointment history, stylist notes, and, with consent, photos). We use children's information only to operate the salon, we never sell it, and we never use it for advertising. Where another client can see a client in the app, a minor appears as first name and last initial only. A parent or guardian can review, correct, or ask us to delete their client's information at any time (see Your choices).

Photos and media

Whether we may use photos and video of you to promote the salon is controlled by the Photo and Video Release, which you accept or decline per client at signup. It is optional, and declining does not affect your account. You can change each client's choice at any time in your account settings (Account, then the photo permission control for eachclient). If you revoke consent, we stop using new images of that client and make a reasonable effort to remove existing ones from channels we control.

Text messaging (SMS)

Texting is strictly opt-in: the box is unchecked by default, and we never text a number without it. If you opt in, we send at most around 4 messages per month, honor nighttime quiet hours, and honor STOP (opt out) and HELP replies immediately. You can also turn texting off in your account settings. We never sell or share your mobile number or your opt-in status with third parties for their marketing; Twilio processes messages solely to deliver them. Full program terms are at elegant-image.floorcraft.dev/sms.

Cookies and push notifications

We use a short list of first-party cookies: sign-in session cookies (Clerk), a language preference cookie, and a first-visit attribution cookie that remembers how you found us (marketing source only, no personal details). We do not use advertising cookies. If you install the app and turn on push notifications, your device gives us a push subscription we use to deliver them; you can turn push off in your device or browser settings at any time.

How long we keep information

We keep information for as long as your account is active. After an account closes, we retain what we must: financial records (charges, payments, tax records) and signed consent and waiver records are kept as required for legal, accounting, and liability purposes; most other records are deleted or de-identified once no longer needed. Attendance history may be retained in de-identified form for salon statistics.

Your choices

• Photo and video consent: change it per client, any time, in account settings.
• Texts: reply STOP, or turn texting off in account settings.
• Push notifications: control them in your device or browser settings.
• Non-essential email: unsubscribe links in marketing emails, honored immediately. Service emails (receipts, account notices) continue while you have an account.
• Access and correction: most records are visible and editable in your account; for anything else, email us.
• Account deletion: request deletion from your account settings or by email. We record the request and a person completes it, because records about minors and money need careful handling: we delete what we can and tell you what we must retain (see How long we keep information).

Residents of your state and other jurisdictions may have additional privacy rights under applicable law, including the right to direct businesses not to sell covered information; we do not sell personal information, and we will honor any such request. We verify identity before acting on privacy requests.

Security, honestly stated

Sign-in is handled by Clerk with modern authentication. Card numbers never touch our servers. All traffic is encrypted in transit (HTTPS). Staff access to client records is role-based: stylists and staff see what their job requires, and money-related admin actions are permission-gated and logged to an audit trail. Our database is hosted by Neon with access restricted to the application. No system is perfectly secure, and we will not pretend otherwise: if a breach affecting your personal information occurs, we will notify you as required by law.

Changes to this policy

We may update this policy as the Services evolve. For material changes, we will notify you by email or in the app before the change takes effect. The "Last updated" date above always reflects the current version.

Contact us

Elegant Image (Las Vegas, NV). For any privacy question or request, email jennamcshinsky@gmail.com. See also our Terms and Conditions and Refund and Cancellation Policy.