Legal

Privacy Policy

How SalonDesk collects, uses and protects personal information — for salons and for the people who book with them.

Effective 08/21/2026 · Last updated 08/21/2026

1. Who we are

SalonDesk is operated by Nichesoft, LLC, a Texas limited liability company, with its principal place of business at 3400 N. Central Expy #110-316, Richardson, TX 75080 (“SalonDesk”, “we”, “us”). You can reach us at legal@nichesoft.com.

2. The two roles we play — please read this first

SalonDesk works differently from most software, and it changes who is responsible for your information.

When you create your own SalonDesk account — to find salons, book appointments, save a card or leave a review — we decide how that information is used. In privacy law terms we are the controller, and this policy governs.

When a salon enters information about you into their SalonDesk account — client notes, service history, purchases — that salon decides how it is used. We only process it on their instructions. In privacy law terms the salon is the controller and we are a processor. The salon's own privacy notice governs, and requests to see, correct or delete that information should go to them. We will help them respond.

Where the same person is both a client and a salon employee or owner, both roles can apply at once to different sets of information.

3. Information we collect

Information you give us

Account details — name, email address, phone number, password, and any profile photo you upload.
Booking details — the salon, service, provider, equipment, date and time you select, and any notes you add.
Address information — where you request a mobile or in-home appointment, the service address you provide.
Payment information — see section 5. We do not store full card numbers.
Reviews and communications — reviews you submit, and messages you send to us or to a salon through the platform.

Information we collect automatically

Device and usage data — IP address, device type, operating system, browser, app version, pages viewed and actions taken.
Location — if you use “find salons near me” or a travel-fee estimate, we use your device location only with your permission, which you can withdraw in your device settings at any time.
Cookies and similar technologies — see section 10.

Information from others

From salons — a salon may add you as a client, including appointment and purchase history.
From payment processors — confirmation of payment, the last four digits and card brand, and fraud signals.
From your employer — if you are invited as an employee, the salon provides your name, role and schedule.

4. How we use information

To create and run your account, and authenticate you.
To take, confirm, change and cancel bookings.
To process payments, deposits, refunds and memberships.
To send transactional messages — confirmations, reminders, receipts and account notices. These are not marketing and you cannot opt out of them while you hold an account.
To operate the marketplace, including search, categories and “salons near me”.
To verify that a review comes from someone who actually received the service being reviewed.
To provide support, investigate problems and prevent fraud and abuse.
To improve the product using aggregated or de-identified data.
To send marketing, only where you have opted in or where permitted by law, and always with an unsubscribe link.
To meet legal, tax and accounting obligations.

5. Payment information

Card payments are handled by our payment processor, WorldPay. We do not store full card numbers or security codes on our systems. We retain a token, the card brand and the last four digits so you can recognise a saved card. Your payment information is also subject to WorldPay's privacy policy.

Where you pay through Apple Pay or another digital wallet, that provider handles the transaction under its own terms.

6. When we share information

We do not sell your personal information.

We share information in these circumstances only:

With the salon you book — your name, contact details, the booking, and any notes you provide. They need it to serve you.
With service providers who work on our behalf under contract: cloud hosting (Microsoft Azure), payment processing, email delivery, customer support tooling and error monitoring.
With connected hardware — where a salon uses T-Max Touch timer systems or Unity spray booths, the session data needed to operate that equipment.
For legal reasons — to comply with law, enforce our terms, or protect the rights and safety of users and the public.
In a business transfer — if we are involved in a merger, acquisition or sale of assets, with notice to you.
With your direction — anything else you ask us to share.

7. Where information is held, and how it is protected

SalonDesk runs on Microsoft Azure. Data is held in United States, Canada, and Europe matching the same region in which you reside. We use encryption in transit, encryption at rest, access controls, redundant storage and automated backups, and we restrict staff access to what each role requires.

No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal information we will notify you and any regulator as required by law.

8. How long we keep information

Category	Retention
Account records	For as long as your account is open
Booking and service history	For as long as your account is open
Payment and transaction records	For 7 years
Support correspondence	For 2 years
Server and security logs	For 1 year

Where a salon is the controller (section 2), retention follows that salon's instructions and their own policy.

9. Your privacy rights

Depending on where you live, you may have the right to:

Know what personal information we hold and get a copy of it
Correct information that is inaccurate
Delete information, subject to legal exceptions
Obtain your data in a portable format
Opt out of sale, sharing, or targeted advertising (we do none of these)
Not be discriminated against for exercising these rights

Texas residents have these rights under the Texas Data Privacy and Security Act. California residents have them under the CCPA as amended by the CPRA. Residents of other states with comprehensive privacy laws have comparable rights. Residents of the EU, EEA and UK, where GDPR applies, additionally have the right to object to processing and to lodge a complaint with a supervisory authority.

To exercise any of these, email legal@nichesoft.com. We will verify your identity before acting, and respond within the time the applicable law allows — generally 45 days. You may use an authorised agent where the law permits.

If your request concerns information a salon holds about you, we will refer you to that salon, since they control it.

10. Cookies and similar technologies

We use cookies and local storage to keep you signed in, remember preferences and understand how the service is used. Strictly necessary cookies cannot be switched off. You can control the rest through your browser settings.

11. Children

SalonDesk is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us information, contact legal@nichesoft.com and we will delete it.

Salons sometimes serve minors. Where a salon records information about a minor client, the salon is responsible for obtaining any consent the law requires from a parent or guardian.

12. Marketing

You can opt out of marketing email at any time using the unsubscribe link or by emailing us. Transactional messages about your bookings and account will continue. SMS, where offered, follows the same rule and you can reply STOP to end it.
NOTE: If you opt out, you may also no longer receive system notices or reminders.

13. International transfers

We operate from the United States and information is processed there. If you use SalonDesk from outside the US, you understand your information will be transferred to the US, which may have different data-protection laws.

14. Changes to this policy

We may update this policy. We will change the “last updated” date and, where the change is significant, notify you by email or in the app before it takes effect.

15. Contact us

Nichesoft, LLC
3400 N. Central Expy. #110-316, Richardson, TX 75080 USA
legal@nichesoft.com