SalonBookSalonBook ("the app", "we", "us") is a point-of-sale and back-office tool for salons and barbershops. This policy explains what personal data the app handles, why, and what choices you have. It is written for three groups: salon owners who create an account, staff (cashiers and barbers) added by an owner, and customers whose details a salon may record.
1. Who we are
The app is published by Alrighttech (Lagos, Nigeria), the data controller for account and billing data. Each salon is the controller of the business records it enters (sales, customers, staff), and we process those records on the salon's behalf. Questions: .
2. Data we collect
| Category | Examples | Source |
|---|---|---|
| Salon account | Salon name, branch, salon phone and email, owner name, owner email, password (stored hashed by our authentication provider), subscription plan and status | Entered by the owner at registration |
| Staff profiles | Name, role (owner, cashier, barber), 4-digit PIN, optional email, phone and photo, active status | Entered by the owner or the staff member |
| Business records | Sales (service, amount, payment method, tip, barber, cashier, time), shifts and cash counts, expenses and receipt photos, commissions, salaries and payroll runs, IOU requests, alerts, activity log | Entered by staff while using the app |
| Customer records | Customer name, phone number, visit count, amounts spent, bank transfer reference, notes a salon adds | Entered by the salon; optionally from a QR code the customer presents |
| Social inbox (optional) | If a salon connects its Instagram or TikTok business account: the account name and ID, an access token, and direct messages exchanged with customers on that account | Meta / TikTok, after the salon authorises the connection |
| Bank statement imports (optional) | Lines from a POS or bank statement CSV a salon chooses to upload for reconciliation (date, amount, reference) | Uploaded by the salon |
| Payments | Subscription payment reference, amount, currency, plan and status. Card details are entered on Paystack's pages and never reach our servers. | Paystack |
| Technical | App version, device platform, connectivity state, error logs, request logs on our servers (IP address, timestamp) | Generated automatically |
3. Why we use it
- To provide the service: record sales, reconcile shifts, calculate commissions and payroll, and show reports to the right role.
- To keep your data in sync between devices and the cloud, including an offline queue on the device that uploads when a connection returns.
- To run your account: sign-in, password reset emails, trial and subscription status, invoices and payment confirmation.
- To support you when you contact us, and to investigate errors and abuse.
- To meet legal obligations, such as keeping payment records for tax and accounting purposes.
Legal bases (where applicable, including under the Nigeria Data Protection Act 2023 and the GDPR): performance of a contract with the salon, our legitimate interest in operating and securing the service, consent for optional integrations (social inbox, camera), and legal obligation for billing records.
4. Who we share data with
We do not sell personal data. We share it only with providers that help us run the app, under contract:
| Provider | Purpose |
|---|---|
| Supabase (database, authentication, edge functions, hosted in the cloud) | Stores account, staff, business and customer records; sends authentication emails |
| Paystack | Processes subscription payments; receives the billing email and amount |
| Meta Platforms (Instagram) and TikTok | Only if a salon connects an account, to receive and send that account's direct messages |
| Email delivery provider | Password reset and account emails |
We may also disclose data if required by law or to protect the rights and safety of users. If the business is transferred, data would move to the successor under this policy.
5. Device permissions
- Camera: to scan customer or payment QR codes and to photograph expense receipts. Used only while you are on those screens.
- Photos / files: to attach a receipt image, import a statement CSV, or save and share a receipt.
- Network: to sync with the cloud and to open Paystack checkout.
You can withdraw a permission in your device settings; the related feature will stop working but the rest of the app continues.
6. Storage and security
Business records are stored on the device (so the app works offline) and in our cloud database. Cloud data is protected by row-level security so that each salon can only read and write its own records. Connections use TLS. Passwords are hashed by the authentication provider. Social access tokens are stored server-side and are not exposed to other salons.
7. Retention and deletion
- Salon and business records are kept for as long as the salon account exists.
- Deleted accounts: when an owner deletes the salon, the salon's staff, customers, sales, shifts, expenses, social connections and messages are removed from our database within 30 days. Payment records required for accounting are retained for the statutory period (up to 7 years) in anonymised or minimal form.
- Staff removal: an owner can deactivate or delete a staff profile at any time; a staff member can also delete their own profile from More → Delete account.
- Local data on a device is cleared when you sign out and choose to wipe local data, or when the app is uninstalled.
To request deletion, use the account deletion page or the in-app option described there.
8. Your rights
Depending on where you are, you may have the right to access, correct, export, restrict or delete your personal data, to object to certain processing, and to lodge a complaint with a supervisory authority (in Nigeria, the Nigeria Data Protection Commission). Staff and customers whose data was entered by a salon should contact that salon first; we will help the salon respond. You can reach us at and we respond within 30 days.
9. Children
SalonBook is a business tool for adults running or working in a salon. We do not knowingly collect data from anyone under 18 as a user. If you believe a child has created an account, contact us and we will delete it.
10. International transfers
Our cloud providers may store data outside your country. Where required, transfers are covered by the providers' standard contractual safeguards.
11. Changes to this policy
We will post any changes on this page and update the effective date. For material changes we will also notify owners in the app or by email.