Privacy

Who we are, and our role

SaloBoss By Shanti, licensed business no. 301690202, P.O. Box 475, Eilabun 1697200, Israel, info@saloboss.com ("SaloBoss", "we"). We have two roles:

• Database owner of the information about the salon owners who subscribe to us (account, sign-ins, payments) and about visitors to this website.
• Holder of the information about each salon's clients and staff. The owner of that database is the salon, and we process it only on the salon's behalf and on its instructions, as set out in the data processing agreement.

What is collected

About salon owners: name, email, phone, password (stored only in encrypted form, it cannot be read), a log of successful sign-ins (IP address, approximate city and country, type of device and browser), a record of accepting the terms (when, which version, in which language, from which IP address), and payment details: plan, amount, dates, invoice number and an encrypted code (token) for the card. The card number itself never reaches us; it is kept by the payment company only.

About the salon's clients (on the salon's behalf): whatever the salon enters or receives, including: name, phone, email, date of birth, city, hair type, appointments, cancellations and their reason, notes, formulas, special prices and treatment packages, a photo, and WhatsApp conversations with the salon: text, voice recordings, photos, videos and documents, as well as automatic transcripts of recordings and automatic descriptions of photos and videos. When a client uses the client app, we also keep the device they allowed notifications on and a one-time sign-in code (encrypted, for a short time).

About the salon's staff: what the salon enters, such as name, phone, email, photo and ID number.

About visitors to the website: conversations with the demo bot on the website; functional cookies only (language, colour theme, remembering an opening screen); and general visit statistics from Vercel, with no cookies and no identifying information.

Medical information: the app does not ask health questions and has no field for medical information. If the salon sets up such a question before booking, the answer is not saved with the appointment. If a client writes medical information in a message themselves, it is kept as part of the conversation.

What the information is used for

• To run the service: calendar, appointments, reminders, the client app, the bot and the salon's messages.
• To take payment and issue invoices.
• To give support and fix faults.
• To improve the bot: automatic and manual checks of the bot's answers to find mistakes (section 6).
• To keep the system secure and prevent misuse.
• To meet our legal obligations.

We do not sell information, do not pass it to any marketing party, and do not use one salon's information for the benefit of another salon.

Do you have to give the information?

There is no legal obligation to give the information. Without account details a subscription cannot be opened, and without a name and a phone number the salon cannot book an appointment.

Who the information is passed to

The information is passed only to suppliers that run parts of the service for us, and each of them is bound by contract to use it only to provide the service to us:

The AI suppliers are bound not to use the information to train their models. Beyond that, we pass information on only under a court order, a demand from an authorised body, or a duty under the law.

Who on our side sees the information

• Support: the SaloBoss system administrator can enter any salon to give support and fix faults. Every action they take in the admin console is recorded in an action log.
• Improving the bot: every night an automatic system sends the bot's conversations from the previous day to the AI supplier (Anthropic), to find wrong answers. Answers marked as wrong are shown to the system administrator, who may also look at the conversation around them, in order to fix the bot.
• No access for any other purpose: nobody on our side looks at a salon's information for any other reason. Access is limited to whoever needs it for their work and is bound by confidentiality.

Information security

Passwords are stored only in encrypted form. Signing in from a new device also needs a code sent by email. A client who signs in without a verification code cannot see their visit history. The connection to the app is encrypted, repeated sign-in attempts are blocked for a while, and each salon's information is kept apart in the system from the information of other salons. Media files are kept in private storage that is not open to the public. The information is backed up every night. No system is 100% protected, so we do not promise that there will never be a security incident.

How long the information is kept

• As long as the salon subscribes.
• Deleting the account from inside the app: the account is locked at once, and all the information is deleted automatically after 30 days.
• A deletion request by email: within 90 days at most.
• Backups: up to 60 days at most, and then they are deleted.
• Invoices and payment records: 7 years, as tax law requires.
• A client the salon deleted permanently: the client's file is deleted; the records of appointments that already took place stay in the salon's calendar for running the business.

Your rights

Anyone may see the information kept about them, ask to correct wrong information or to delete it, and ask to stop receiving advertising. A client of a salon should contact the salon first, as it owns their information. You can also write to us at info@saloboss.com, and we will pass the request to the salon and make sure it is handled. We answer within 30 days, free of charge and with no need to give a reason. A salon owner can download all of their information themselves at any time.

A security incident

If information gets out without permission, we will tell the affected salons as soon as possible, and within 72 hours at most from when we found out, what happened and what we did. A serious incident is also reported to the Privacy Protection Authority, as the law requires.

Minors

A salon account is for people aged 18 or over. An appointment for a child is booked by a parent; about the child we keep only their name and the service, inside the parent's appointment. A photo of a minor is published only with a parent's consent, and that is the salon's responsibility.

Cookies

The website and the app use only the cookies they need in order to work: secure sign-in, language and colour theme. There are no advertising cookies and no tracking by advertising companies.

Changes to this policy

A significant change will be shown in the app and will need to be accepted again. The date of the last update appears at the top of the page.

Contact

SaloBoss By Shanti, licensed business no. 301690202, P.O. Box 475, Eilabun 1697200, Israel · info@saloboss.com. Every message reaches a person.