Privacy Policy

Last updated: June 19, 2026

The Braid Flow (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

1. Information We Collect

Account information: Name, email address, and password when you register.

Business information: Salon name, address, phone number, and other details you provide.

Client data: Information salon owners store about their clients, including names, contact details, appointment history, and hair profiles.

Usage data: Pages visited, features used, device type, browser, and IP address.

Payment data: Processed securely by Stripe. We do not store full card numbers or CVV codes.

2. How We Use Your Information

We use collected information to:

• Provide, operate, and improve the platform
• Send transactional and appointment-related communications
• Detect and prevent fraud and abuse
• Comply with legal obligations
• Respond to support requests

3. Sharing of Information

We do not sell your personal data. We share information only with:

• Service providers: Stripe (payments), Twilio (SMS), Resend (email), and our cloud hosting provider — each bound by data processing agreements.
• Law enforcement: When required by valid legal process.
• Business transfers: In connection with a merger or acquisition, with notice to users.

4. Data Retention

We retain account data for as long as your account is active and for 90 days after deletion. Appointment records may be retained longer for legal and accounting compliance.

5. Security

We use industry-standard encryption (TLS in transit, AES-256 at rest) and access controls to protect your data. No system is perfectly secure; please use a strong, unique password.

6. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising cookies without your consent.

7. Your Rights (GDPR / CCPA)

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data (“right to be forgotten”)
• Data portability — receive your data in a structured, machine-readable format
• Opt out of certain processing activities

To exercise these rights, email us at privacy@thebraidflow.com.

8. Children's Privacy

The Braid Flow is not directed at children under 13. We do not knowingly collect data from minors. If you believe a child has provided us data, please contact us and we will delete it promptly.

9. International Data Transfers

Data may be processed in the United States. By using our platform, you consent to this transfer. We ensure appropriate safeguards are in place for international transfers under applicable law.

10. Third-Party Links

Our platform may link to third-party websites. We are not responsible for their privacy practices and encourage you to review their policies.

11. Changes to This Policy

We may update this policy from time to time. We will notify registered users of material changes by email or in-app notice at least 7 days before the change takes effect.

12. Contact Us

For privacy-related questions or requests, contact us at:

The Braid Flow
Email: privacy@thebraidflow.com
United States