Privacy Policy

Effective date: May 1, 2026 · ChairAutopilot

This Privacy Policy explains what information ChairAutopilot collects, how we use it, and how we protect it when you use our booking platform.

1. Information We Collect

From salon owners (tenants):

• Name and business name
• Email address and phone number
• Business address and salon details
• Service menu, staff information, and availability

From clients booking appointments:

• Full name, phone number, and email address
• Appointment details (date, time, service selected, optional notes)

Platform usage data:

• Monthly booking counts and service usage metrics (aggregated per salon)
• Chatbot interaction counts (conversation content is not stored beyond the session)
• Email send logs (recipient, subject, status, timestamp - for operational records)

2. How We Use Your Information

• To process and confirm appointments
• To send booking confirmation and reminder emails to clients
• To send monthly performance summaries to salon owners
• To power the FAQ chatbot on the booking page
• To enable salon owners to manage their business through the owner portal

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Email Communications

We send transactional emails including booking confirmations, appointment reminders, and review requests on behalf of the salon. These emails are sent using Resend, a third-party email delivery service. We do not send unsolicited marketing email to clients.

4. SMS

ChairAutopilot's platform architecture includes optional SMS reminder capabilities. Whether any given salon uses SMS messaging depends on that salon's plan and configuration. If enabled, SMS messages are sent for appointment reminders only.

5. Data Storage and Security

Salon and client data is stored on secured infrastructure. Data is stored per salon in isolated directories. Owner portal passwords are stored as bcrypt-hashed values. Clients do not have platform accounts, so no client passwords are stored.

6. Third-Party Services

• Resend - transactional email delivery
• Google Fonts - font rendering on public booking pages
• Anthropic (Claude AI) - optional AI-assisted FAQ chatbot responses (classifier only; no client booking data is sent to the AI)
• Stripe - optional payment and deposit processing (only active for salons that have enabled deposits). When a deposit is required, payment card data is collected directly by Stripe on a Stripe-hosted page; ChairAutopilot never sees or stores payment card numbers. Stripe's privacy policy is available at stripe.com/privacy.
• Virtual Try-On image processing - If you use Virtual Try-On, the photo you provide is sent to our AI image provider solely to generate your style preview. ChairAutopilot does not store your photo on its own servers. The provider processes, and may retain, the uploaded image under its own data-retention policy.

7. Data Retention

Client booking data is retained while the salon account is active. If a salon is removed from the platform, the associated data is deleted from our servers.

8. Your Rights

If you have a booking with this salon and want your information corrected or deleted, please contact the salon directly. For platform-level data questions, use the Contact page.

9. Changes to This Policy

We may update this policy periodically. The effective date at the top of this page reflects the most recent revision. Continued use of the platform after changes are published constitutes your acceptance of the updated policy.