# ShearSlot Privacy Policy
Draft – pending attorney review
Last updated November 4, 2026

This Privacy Policy explains how ShearSlot collects, uses, shares, and protects personal information when you use shearslot.com, the ShearSlot app, and ShearSlot for Shops (together, the "Service").

ShearSlot is operated by Jonathan Pollock, individually ("ShearSlot," "we," "us"), and may be assigned to JYP Designs LLC upon formation.

## 1. Who this policy covers

- **Shop owners and staff:** barbershops and salons that apply for and subscribe to ShearSlot for Shops, and the barbers and staff they add.
- **Customers:** people who find a shop, book, manage, or review an appointment through ShearSlot, either as a guest or with an optional ShearSlot account.
- **Visitors** to shearslot.com.

### Shops and ShearSlot have different roles

When a customer books with a shop, the **shop** decides how it uses that customer's information (for example, its client list and staff notes). ShearSlot stores and processes that information **on the shop's behalf** to run the Service. If you are a customer and have a question about what a particular shop does with your information, you can contact the shop directly or contact us and we will help.

## 2. Information we collect

### From shop owners and staff

- **Access request:** shop name, shop address, owner name, owner cell phone, owner email, number of chairs, and optionally your current booking tool and how you heard about us.
- **Shop profile:** shop name, type, address, city, phone, description, hours, services and prices, and features you turn on.
- **Staff details:** names, roles, years of experience, and the services each person offers.
- **Account and sign-in:** email address and password (passwords are handled by our authentication provider and stored only as secure hashes), and optional device PINs (stored only as hashes).
- **Billing:** your subscription plan, chair count, billing status, invoices, and the customer and subscription IDs from our payment processor, Stripe. **We never see or store your full card number.** Card details are entered only on Stripe's hosted pages.
- **Consent records:** when you agreed to the Subscription Terms and this Privacy Policy, and which version, including your typed name, a timestamp, IP address, and browser or device type, and when you confirmed by email.
- **Communications:** emails and messages you send us, such as support requests.

### From customers

- **Booking details:** your name, mobile phone number, the shop, barber, service, date and time, and any note you add to your booking.
- **Optional account:** if you create a ShearSlot account, your name, email address, password (stored only as a hash by our authentication provider), verified phone number, and favorite shops.
- **Appointment history:** past and upcoming appointments, status (for example, completed, canceled, or no-show), how the appointment was booked (online, walk-in, or phone), and any tip percentage you choose (tips are paid at the shop, not through ShearSlot).
- **Reviews:** star rating and review text. Public reviews show only your first name and last initial.
- **Texting preferences:** whether you have opted out of texts, and records of messages sent to you.
- **Consent records:** when you agreed to the Customer Terms and this Privacy Policy, which version, and your texting choices, including a timestamp, IP address, and browser or device type.
- **Shop notes:** a shop's staff may add private notes to your client record (for example, preferred cut). These notes are visible only to that shop's staff and are never shown publicly.

### Collected automatically

- **Device and usage data:** IP address, browser and device type, pages viewed, and timestamps, used for security, rate limiting, and keeping the Service working.
- **Local storage:** the Service uses your browser's local storage and similar technologies to keep you signed in, remember your settings and in-progress bookings, and limit repeated sign-in attempts. We do not currently use advertising cookies or third-party ad trackers.
- **Push notification tokens:** if you allow push notifications in the ShearSlot app, a device token so we can send them.

## 3. How we use information

- To provide the Service: show shops, take and manage bookings, send confirmations and reminders, and let shops run their schedules and client lists.
- To review shop access requests, set up shops, and verify that a shop is real.
- To process subscriptions and payments through Stripe, send receipts, and handle failed payments, pauses, and cancellations as described in the Subscription Terms.
- To send account, billing, and service messages by email, text, or push notification.
- To send optional **marketing texts on a shop's behalf**, only to customers who have given the consent required by law.
- To keep the Service safe: prevent fraud, abuse, spam, and unauthorized access, and enforce our Terms.
- To provide support and respond to your requests.
- To improve the Service, including fixing bugs and understanding how features are used.
- To comply with legal, tax, and accounting obligations.

**We do not sell personal information**, and we do not share it for cross-context behavioral advertising.

## 4. Text messages (SMS)

- **Appointment texts:** when you book, you agree to receive appointment confirmation, reminder, cancellation, and related texts from the shop via ShearSlot. Messages identify the shop (for example, "Gustavo's Barbershop via ShearSlot"). Message and data rates may apply. Message frequency varies with your bookings.
- **Marketing texts:** sent only if you separately opt in with express written consent, and only between 8 AM and 9 PM in your local time. Consent to marketing texts is not a condition of booking.
- **Opting out:** reply **STOP** (or UNSUBSCRIBE, CANCEL, END, QUIT) to stop texts, and **HELP** for help. We honor opt-outs automatically and promptly, within 10 business days at most, and shops may not re-add customers who opted out.
- **Mobile information is not shared with third parties or affiliates for their marketing or promotional purposes.** Text messaging opt-in data and consent are not shared with any third parties, except service providers (such as our SMS provider) that send messages on our behalf.
- Customers who use the ShearSlot app may receive push notifications instead of texts. You can turn push notifications off in your device settings.

## 5. How we share information

We share personal information only as described here:

- **With the shop you book with.** Your booking details, contact information, consent records for that shop, appointment history, and reviews of that shop are shared with that shop's owner and staff.
- **Publicly.** Shop profiles (name, address, phone, hours, services, staff names) are public. Reviews are public with your first name and last initial only.
- **With service providers** that help us run the Service, under contracts that limit their use of the information to providing services to us. These currently include or are expected to include:
  - **Stripe** – payment processing and subscription billing
  - **Supabase** – database hosting and sign-in
  - **Twilio** – text message delivery
  - **Resend** – email delivery
  - **Cloudflare** – website hosting and security
  - **Apple and Google** – push notification delivery
- **For legal reasons:** to comply with law, a court order, or a valid legal request; to protect the rights, safety, or property of ShearSlot, shops, customers, or others; or to investigate fraud or abuse.
- **Business transfers:** if ShearSlot is transferred to JYP Designs LLC, or is involved in a merger, sale, or similar transaction, personal information may be transferred as part of it, subject to this policy.
- **With your consent** or at your direction.

## 6. How long we keep information

- **Active accounts:** we keep information while a shop's account or a customer's account is active and as needed to provide the Service.
- **After a shop cancels:** shop data (including its client list and appointments) is kept for **90 days** so the shop can reactivate or request an export. After that, we delete or anonymize it, except records we must keep for legal, tax, accounting, or fraud-prevention reasons.
- **Customer accounts:** if you delete your ShearSlot account, we delete your account profile and favorites. Your appointment records with a shop may remain part of that shop's records until the shop deletes them or the shop's data is deleted.
- **Billing and consent records:** kept as long as required for tax, accounting, and legal purposes.

## 7. Security

We use reasonable safeguards to protect personal information, including:

- Card payments handled entirely on Stripe's hosted pages (we never see or store card numbers).
- Passwords and PINs stored only as salted, one-way hashes.
- Encrypted connections (HTTPS) for the website and app.
- Access controls so each shop can see only its own data, and staff notes are never public.
- Limits on repeated sign-in and lookup attempts.
- Private, hard-to-guess links for managing appointments.

No system is perfectly secure. If we learn of a security breach affecting your personal information, we will notify you as required by law.

**We will never ask for your card number, password, or PIN by email, text, phone, or direct message.** If you receive a message like that claiming to be from ShearSlot, do not respond, and let us know at support@shearslot.com.

## 8. Your choices and rights

- **Access and correction:** shop owners can view and update shop, staff, and billing information in the app and billing portal. Customers can view and update account information in the app.
- **Export:** shops can request an export of their data (for example, CSV) at any time, including for 90 days after cancellation.
- **Deletion:** you can ask us to delete your account or personal information by emailing support@shearslot.com. If your information is held on behalf of a shop, we may refer your request to that shop or handle it together with them. Some information may be kept as described in Section 6.
- **Texts:** reply STOP to any text to opt out.
- **Emails:** you can unsubscribe from marketing emails using the link in the email. Account, billing, and security emails are part of the Service and can't be turned off while your account is active.
- **Push notifications:** turn them off in your device settings.

Depending on where you live, you may have additional rights under state privacy laws. We will respond to requests as required by applicable law and will not discriminate against you for exercising your rights. We may need to verify your identity before acting on a request.

## 9. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. A parent or guardian may book an appointment for a child using the parent's own contact information. If you believe a child under 13 has given us personal information, contact us and we will delete it.

## 10. Location of processing

ShearSlot is based in Ohio, and the Service is intended for shops and customers in the United States. Information is stored and processed in the United States.

## 11. Changes to this policy

We may update this Privacy Policy. We will post the updated version at shearslot.com/privacy and change the "Last updated" date. For material changes, we will notify shop owners by email and, where appropriate, notify customers in the app at least 30 days before the change takes effect.

## 12. Contact

Jonathan Pollock (ShearSlot)
Email: support@shearslot.com
Website: shearslot.com