Privacy Policy

The short version

Soloona is software for salons. We hold two kinds of information: details you give us when you ask about the product, and the client records a salon brings into its own account. We sell neither, we run no advertising trackers, and salons' client data belongs to the salon — we process it only to run the product for them.

What we collect from visitors

If you request a demo we store what you type: your name, business name, phone, email, and your message. We use it to reply and for nothing else. There is no cross-site tracking and no advertising pixel on our sites.

What we process for salons

A salon using Soloona imports and creates client records — names, contact details, visit history, spend, and messaging consent. That data is the salon's. We process it to provide the product: showing the calendar, taking bookings, ringing up sales, and sending the messages the salon chooses to send. We do not use one salon's client list for anything beyond that salon's account, and we never sell it.

Messaging consent

Soloona is built so that marketing texts and emails only go to people whose consent is recorded. Reply STOP to any text to opt out permanently; the suppression is absolute and enforced in software. Booking an appointment online grants contact about that appointment only — it is not marketing consent unless you tick the separate box that says so.

What we don't hold

Card numbers never touch Soloona. Payments settle on the salon's own terminal; we record only how something was paid, never the card itself.

Where data lives

Salon data is stored with Cloudflare (database, file storage and hosting) in the United States, encrypted in transit and at rest. Access requires authentication, and each salon's records are scoped to its own salon at the query layer. Some data reaches the sub-processors listed below, one of which is outside the United States.

Sub-processors

We use a small number of outside services to run Soloona, and client data reaches some of them:

• Cloudflare (United States) — database, file storage and hosting. All salon data lives here.
• DeepSeek (China) — powers the built-in assistant. When a salon asks the assistant a question about a client, the client records needed to answer it are sent to DeepSeek's API. That can include a name, phone number, email, birthday, notes and preferences the salon has recorded, visit and spend history, and the text of past messages with that client. Nothing is sent unless a salon uses the assistant, and the assistant is never able to message a client.
• Twilio (United States) — delivers text messages. Receives the recipient's phone number and the message body.
• Resend (United States) — delivers email. Receives the recipient's address and the message body.

If your salon would rather no client data left the United States, ask us to disable the assistant for your account and nothing will be sent to DeepSeek.

Your rights

California residents may ask what personal information we hold, ask for its deletion, and will never be discriminated against for asking (CCPA). If your data is in a salon's account, we will route the request through that salon, who is the controller of its client list. Write to hello@soloona.app and we'll respond within 30 days.

Changes

If this policy changes materially we'll say so on this page with a new date, and notify salon accounts directly.