Privacy Policy

For shops and professionals who use StyleFlow, we hold your account information — name, business name, email, phone, and login credentials — in order to give you an account, support you, and bill you.

For the clients those shops serve, the shop owns and controls the client records it stores in StyleFlow. We hold and process that data on the shop's behalf and under its instructions. If you are a client of a shop and want to see, correct, or delete what that shop holds about you, contact the shop directly; we will act on the shop's verified instructions and help it respond.

Each shop's data is kept logically separated from every other shop's. One shop cannot see another shop's clients.

• Account and contact information — name, business name, email address, phone number, and login credentials for shop owners and staff.
• Staff and service information — role, services offered, availability, and pay or commission settings you configure.
• Client and booking records — client name, phone or email, appointment history, notes, preferences, loyalty points, and visit or no-show history, entered by the shop.
• Transaction records — bookings, deposits, purchases, and refunds.
• Limited payment metadata — such as card brand and last four digits, surfaced from your connected payment provider. StyleFlow is not the payment processor and never stores full card numbers.
• Technical and log data — IP address, device and app version, and server logs, used to operate and secure the service.

The mobile app does not collect your precise or approximate location, does not access your camera, photos, contacts, or microphone, and contains no advertising or third-party analytics software.

When you sign in on the mobile app, your session token is stored on your own device using the operating system's secure storage — the iOS Keychain or the Android Keystore. It is not readable by other apps and is deleted when you sign out.

The app can copy a client's phone number to your clipboard when you tap to call, so you can paste it into your own calling app. That copy happens entirely on your device and is never sent to us.

To provide bookings, scheduling, payments, messaging, and reporting; to authenticate you; to send the transactional messages you or your shop configure, such as appointment confirmations and reminders; to provide support; to keep the service secure and detect abuse; and to meet legal and tax obligations.

We do not sell personal information and we do not share it for advertising. We share data only with the service providers needed to run the features you use, and only the data those features require:

• Payment processing, when you connect a payment provider such as Square.
• Email and SMS delivery, for the notifications your shop sends.
• Calendar sync, when you connect an external calendar.
• Cloud hosting and database infrastructure that runs the platform.
• An AI provider, only if your shop turns on the optional AI business assistant, and only for the business data that feature needs.

Several of these connect through your own outside accounts. Data you route to those providers is also handled under their terms. We may disclose information if legally required, or as part of a business transfer, in which case this policy continues to apply to the transferred data.

We keep shop and client data for as long as the shop's account is active. A shop can export its client and booking data at any time. When an account is closed, we delete or anonymize its data within 90 days, except where we must retain records for tax, accounting, or legal reasons.

To request deletion of your account and its data, follow the steps on our account deletion page, or email domsonlineshop@gmail.com.

Data is encrypted in transit using TLS and encrypted at rest by our hosting and database providers. Access to production data is restricted. Credentials for connected services are stored encrypted. No system is perfectly secure, but we work to protect your data and will notify affected users of a breach as required by law.

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, and to object to or restrict certain processing. California residents have these rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them. We do not sell or share personal information as those terms are used under California law.

To exercise a right, email domsonlineshop@gmail.com. If your data is held by a shop that uses StyleFlow, we will forward your request to that shop and support its response.

StyleFlow is a business tool and is not directed to children under 13. We do not knowingly collect personal information from children. A shop may store an appointment for a minor client at the direction of that client's parent or guardian; that record belongs to the shop and is governed by section 1.

If we change this policy we will update the effective date above and, for material changes, notify account holders by email or in the app.

Questions about this policy or about your data: domsonlineshop@gmail.com.