Privacy Policy

Free-tool calculations run in your browser. We use a submitted ZIP code to retrieve public market data, and working inputs remain on your device unless you choose to export or save them. A membership stores the profile, participant conversations, encrypted saved-tool work, identity, security, and subscription records needed to provide the private workspace.

Information you provide

Registration collects first and last name, company name, mailing address, phone number, email address, password, and legal acknowledgement. Amazon Cognito processes the password; Salon Coach does not store it in the application profile. Contact and consultation requests may also include your name, email, business details, and message. We use this information to create and operate the account, respond, schedule services, secure access, and maintain the resulting business relationship.

Calculator and browser data

The pricing and build-out tools run in your browser. Saved profiles and calculator inputs are stored on your device using browser storage and are not automatically sent to Salon Coach. Clearing site data may remove them.

Membership profiles and authentication

Member accounts use Amazon Cognito for identity, passkeys, and multi-factor authentication. The application uses a short-lived OAuth transaction and an opaque, host-restricted, HttpOnly server session with inactivity and absolute expiration. Cognito identity, access, and refresh tokens are not stored in browser storage or retained in application session records. A profile may include your name, email, phone, location, biography, website/social links, photo, directory preference, and member-messaging preference. You control whether the profile appears in the member directory and whether other members may start a conversation. Roles, audit records, and session records are stored in encrypted AWS services. Authentication and security logs may include IP address, device, risk, and sign-in-event information used to prevent abuse and investigate incidents.

Private conversations, notifications, and saved tools

Conversation subjects and messages are encrypted for the participating accounts, and saved-tool inputs/results are encrypted for their owner. Application coaches and administrators who are not participants cannot open a conversation. A participating administrator may add a member or coach, which securely extends access to the existing subject and message history. A sender may permanently delete their own live message for every participant; backups, point-in-time recovery, security evidence, and audit metadata follow their separate retention schedules. This is server-mediated encryption rather than device-only, zero-knowledge end-to-end encryption: authorized application requests use protected member keys and AWS Key Management Service inside the trusted service boundary. Conversation routing, participants, sender, timestamps, unread counts, participant-add events, lock state, and saved-tool names/types remain service metadata. The foreground application polls for unread messages, conversation additions, progress updates, and engagement events so the bell and open message threads update without a page reload.

Profile photos

Profile photos are stored in a private, versioned, encrypted Amazon S3 bucket and delivered using short-lived signed links. The current interface accepts JPEG, PNG, or WebP images up to 5 MB. If you make your profile directory-visible, other signed-in members may see the profile information and photo presented in that directory.

Payments

Stripe-hosted pages collect and process payment information. Salon Coach stores Stripe customer, subscription, price, status, billing-period, and cancellation identifiers and displays Stripe-hosted invoice/download links, but does not directly collect or store complete payment-card numbers.

External data and exports

Some tool features may request public market or demographic data through our service providers. Requests may include a ZIP code or search location. If you export to Google Sheets or another third-party service, that provider handles the exported information under its own privacy terms.

Technical information

Our hosting and security providers may process standard logs such as IP address, browser type, requested pages, timestamps, and security events. We use this information to operate, protect, and improve the site. We do not sell personal information.

Sharing and retention

We share information only with vendors that help us host, secure, bill, deliver requested integrations, or comply with law. Authorized administrators can view and edit member-facing profile attributes under audited controls; immutable identity IDs, roles, encryption keys, billing identifiers, and security metadata are not exposed to the generic profile editor. Canceling a subscription immediately cancels Stripe billing, marks membership inactive, and restricts paid workspace features; it does not itself delete the account or member data. An approved administrative deletion removes live member/workspace records, versioned profile photos, sessions, Cognito identity, and conversations involving that member. Other participants consequently lose those deleted threads. Stripe financial records, administrative deletion audit evidence, backups, security logs, or legally required records may remain under their applicable retention schedules.

Your choices

You can use the core calculators without creating an account and may clear their locally saved data through your browser. Members can change directory and messaging preferences, update profile details, manage/cancel the subscription, and request access, correction, export, or deletion through the contact page using “Privacy request.” Some records may need to be retained as disclosed above.

Children and changes

The site is intended for business users and not children under 13. We may update this policy as the service changes; the effective date above identifies the current version.

Service providers

Amazon Web Services provides hosting, identity, databases, private object storage, key management, logging, security monitoring, and email delivery. Stripe provides billing and invoice surfaces. Public demographic requests may be sent to the U.S. Census Bureau, and optional exports are handled by the export provider under its own terms.

Contact

Questions about this policy can be sent through the Salon Coach contact page. Add the operating legal entity, business mailing address, dedicated privacy email, retention schedule, and legally required regional disclosures before commercial launch.