Vivid Salons

Privacy Policy

Last updated: September 22, 2026

This Privacy Policy describes how VIVYLANDS LLC ("we," "us," or "our") collects, uses, discloses, and protects information from users of the Vivid Salons mobile application and website (collectively, the "Service"). By using the Service you agree to this Policy.

1. Who We Are

Vivid Salons is a salon management platform operated by VIVYLANDS LLC, headquartered in North Carolina, United States. The platform serves three user roles: salon owners, service professionals (technicians), and clients.

2. Information We Collect

2a. Information You Provide

Category	Examples	Roles Affected
Contact Information	Full name, preferred name, phone number, email address	All roles
Account Identifiers	User ID (UUID), Firebase Authentication UID, account type (Owner / Professional / Client)	All roles
Address & Location	Zip code, country; salon street address, city, state (owners)	All roles; detailed address for owners
Business Information	Salon name, salon ID, business license (stored securely, visible only to the verification team)	Owners
Employment / Membership	Working salon ID, membership role, approval status	Service Professionals
Service & Appointment Data	Booked services, service history, ticket records, check-in times, technician assignments	All roles
Payment & Subscription Data	Subscription plan tier, billing period; payment method type (Cash / Card / Other) recorded per ticket — no raw card numbers are stored by us	Owners
Work Records	Clock-in/clock-out timestamps, earnings summaries	Service Professionals, Owners
Verification Documents	Business license image, uploaded to private cloud storage during owner signup and accessible only to the Vivid Salons verification team via short-lived signed URLs. We do not ask for a government-issued ID as part of signup. If a claim cannot be confirmed from the business license and the salon’s public Google Business Profile, we may ask for identity verification before approving; where we do, it is destroyed as soon as the review is decided.	Owners

2b. Information Collected Automatically

• Usage & Analytics Data: screens viewed, features used, sign-up funnel events, and error reports — collected via Firebase Analytics and Firebase Crashlytics.
• Device Identifiers: Firebase installation ID used to deliver push notifications.
• Push Notification Token: FCM device token used to send booking, clock-in, and account alerts.
• IP Address & Log Data: standard server logs generated when you access the website or Firebase backend.
• Device Location (salon owners and technicians taking card payments, only): accepting card payments through Square requires device location, which Square’s payment SDK uses for fraud prevention and payment-network compliance. The app asks for “while using the app” permission the first time a card reader or card payment is set up, and you can decline or withdraw it in iOS Settings — card payments through Square will not work without it. We do not store your coordinates; Square receives them under its own privacy policy. Nothing else in the Service uses device location.

2c. Information We Do Not Collect

• Raw credit or debit card numbers (card processing is handled by Square SDK; we receive only brand and last-4).
• Precise location for any purpose other than Square card payments described above — we never track your location in the background, and the salon addresses shown in the app are geocoded from the address you type, not from your device.
• Health or medical data.
• Information from children under 13 (the Service is not directed to minors).

3. How We Use Your Information

• Provide the Service: create and manage accounts, process appointments, clock records, earnings, and ticket transactions.
• Account Verification: confirm that an applicant owns the salon they are claiming — from the business license and control of the salon’s public Google Business Profile — before activating an owner account.
• Communications: send appointment confirmations, booking alerts, schedule changes, account notices, and support messages via SMS and push notification — only where you have opted in or where required for the operation of your account.
• Subscriptions & Billing: manage owner subscription plans and billing records.
• Safety & Security: detect fraud, abuse, and policy violations; protect the integrity of the platform.
• Analytics & Improvement: understand how the Service is used, fix bugs, and improve features.
• Legal Compliance: meet applicable legal, tax, and regulatory obligations.

4. Text Messages (SMS)

By creating an account or submitting an appointment request with SMS consent, you agree to receive text messages from Vivid Salons and its messaging partners at the phone number you provide.

• Owners & Service Professionals: Appointment requests, schedule changes, staff updates, clock notifications, and account notices.
• Clients: Appointment confirmations, reminders, changes, and service-related messages from your salon via Vivid Salons.

Message frequency varies. Message and data rates may apply. Reply STOP to opt out or HELP for assistance at any time.

5. How We Share Your Information

We do not sell your personal information. We share information only in these circumstances:

Recipient	Purpose
Your Salon	Salon owners and their staff see appointment, check-in, and service data for customers of their salon.
Firebase (Google)	Cloud database (Firestore), authentication, analytics, crash reporting, cloud functions, and push notifications.
Twilio	SMS delivery — receives phone numbers and message content solely to send messages.
Square	Card payment processing — receives transaction amounts, and device location where the salon takes card payments (Square requires it for fraud prevention and payment-network compliance); we receive only card brand and last-4 digits in return.
Stripe	Owner subscription billing — receives billing profile; card details are managed by Stripe and never stored by us.
Anthropic (Claude)	AI features — Vivid Agent's daily digest and its drafted replies. It receives the salon's own figures for that day and, when drafting a reply to a booking request, the customer's first name only, together with the salon's public name, phone, and website. It does not receive full names, customer phone numbers, addresses, payment details, or any customer list, and the data is not used to train its models.
Legal Authorities	When required by applicable law, court order, or to protect the rights and safety of users or the public.
Business Transfers	In connection with a merger, acquisition, or sale of assets, subject to equivalent privacy protections.

6. Salon Records & Exports

For a salon's own customers, the salon decides what it records and how long it keeps it. We hold that information on the salon's behalf and act on its instructions — we do not sell it, we do not use one salon's customer list to market to anyone, and we never share it with another salon.

Salon owners can export their records from the Service, including a customer list with names, phone numbers, visit history, and amounts spent. Once a file leaves the Service it is outside our control: the salon is responsible for keeping it safe, for using it only in ways its customers would expect, and for following the law that applies to it, including the rules on marketing messages. If you are a salon's customer and want your details corrected or removed, ask the salon, or contact us and we will pass the request on.

Photos, logos, and descriptions a salon uploads are published on its booking page and website under the licence described in our Terms. Do not upload a photograph of a customer without their permission.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time by contacting us. We may retain certain records for a limited period afterward to comply with legal, tax, or audit obligations. Verification documents are kept only for the review itself: on approval they are destroyed immediately, and a denied application’s documents are destroyed after a 30-day window in which the decision can be contested. What we keep afterwards is the record of the review — who decided, when, and on what basis — not the document.

8. Security

We use industry-standard security measures including encrypted data transmission (TLS), access-controlled cloud storage, Firebase Security Rules, and role-based data access. Verification documents are stored in a private Cloud Storage bucket inaccessible to the public. No security system is impenetrable; in the event of a breach we will notify affected users as required by law.

9. Your Rights & Choices

• Access & Correction: Update your profile information in the app under Settings → Profile.
• SMS Opt-Out: Reply STOP to any SMS from us at any time.
• Push Notification Opt-Out: Disable notifications in your device Settings.
• Account Deletion: Delete your account from inside the app at any time — tap your name at the top of your home screen, open My Profile, and choose Delete Account. This removes your sign-in credentials and your personal profile. If you own an active salon, close it first (Settings → Close Salon) so the salon is never left without an owner. Records the salon must keep for legal, tax, or audit reasons — such as completed transactions — are retained as described in “Data Retention” above. If you are a salon’s client rather than an account holder, your visit and appointment records belong to that salon: ask the salon to remove them, or contact support@vividsalons.com and we will pass the request to them. Need help with any of this? support@vividsalons.com.
• Data Portability: Salon owners can export salon records themselves from Reports → Generate Reports. For anything else, contact us and we will provide a copy of your account data.
• US State Privacy Rights: Depending on where you live — including California, Virginia, Colorado, Connecticut, Utah, Texas, and other states with comprehensive privacy laws — you may have the right to know what personal information we hold and why, to get a copy of it, to correct it, to have it deleted, to limit how sensitive information is used, and to opt out of sale, sharing for cross-context advertising, and profiling that has a legal or similarly significant effect. We do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not profile you for those purposes. You may use an authorised agent, and we will not treat you differently for exercising any of these rights. Contact us to make a request; we will verify it against your account before acting on it, and we will respond within the time the law allows. If we refuse, we will say why, and you can appeal by replying to that decision.

10. Where Your Information Is Held

The Service is operated from the United States and your information is stored and processed there, on Google Cloud infrastructure. The providers listed above may process limited data in other countries in the course of delivering their part of the Service. If you use the Service from outside the United States, you are sending your information to the United States.

11. Third-Party Services

The Service integrates third-party SDKs and services (Firebase, Square, Twilio, Stripe, Anthropic). These providers have their own privacy policies governing their use of data. We encourage you to review their policies. We are not responsible for the privacy practices of third-party services.

12. Children's Privacy

Accounts on the Service are for people aged 13 and over, and a salon owner account is for adults aged 18 and over who can accept our Terms for that business. We do not knowingly collect personal information from children under 13, and we do not direct the Service to them.

A salon may record an appointment for a customer who is a minor — that is the salon's own business record, entered by the salon from details the parent or guardian gave it, and the salon decides what it keeps. If you believe a child under 13 has given us information directly, contact us and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify users via the app or by SMS and update the "Last updated" date above. Continued use of the Service after changes constitutes acceptance of the revised Policy.

14. Contact Us

For privacy questions, requests, or complaints:

• Email: support@vividsalons.com
• Website: vividsalons.com/contact
• Mailing address: VIVYLANDS LLC, North Carolina, United States