Privacy policy

Who we are

SalonBook (getsalonbook.com) is a Northline product. Northline makes booking, feedback and studio software for small businesses: SalonBook, ClinicFlow, ReviewLift and MuscleMap Studio. Northline is run by a sole proprietor based in Istanbul, Türkiye. This policy covers this site and the app behind it.

Two kinds of people, two roles

Business owners who subscribe to our software are our customers. For their account, we decide how the data is used.

Their guests, patients, customers and members are people the business serves. The business decides what it records about them and why; we store and process it on the business's behalf. If you booked with a business, that business is your first contact for questions about your data, and we will help them answer.

What we collect

From business owners

• Email, name, and a password (stored only as a one-way hash).
• Business name, public link name, logo, staff names and working hours.
• Subscription status from our payment provider. We never see or store card numbers.
• If the business takes deposits: its own Stripe keys, with the secret key stored encrypted.
• Call credit balance and a log of reminder calls made (with the phone number masked).

Entered by a business about the people it serves

• SalonBook: the guest's name and phone number, the service, stylist, date and time, deposit status, and notes the salon writes.
• Whether and when someone agreed to a reminder call, and a one-way hash of any number that asked not to be called again.

From visitors to our sites

• Cookies that keep you signed in, remember your language, and remember which product site you are viewing.
• Display preferences saved in your own browser (local storage), which never leave your device. On the MuscleMap member map this includes the weight and age a member may type to sharpen calorie and heart-rate estimates.

On the SalonBook and ClinicFlow sales pages (getsalonbook.com and clinicflowio.com) and on the page shown after checkout, we use the Google Ads tag. It sets Google cookies so we can tell whether someone who clicked one of our ads went on to start a free trial. It is not loaded in the business app, on booking pages that guests and patients use, or on northlinehq.app. We do not sell or rent personal data.

How we use it

• To run the software: bookings, reminders, feedback requests, plans and deposits.
• To open and secure accounts, and to send account emails such as password links.
• To bill subscriptions and call credits, and to stop fraudulent sign-ups.
• To answer support requests.

Reminder calls

We do not send text messages. A SalonBook or ClinicFlow business can switch on an automated reminder call the day before a visit. It only goes to people who ticked the reminder-call box when booking, or who told the business yes. Press 9 during a call to stop further calls from that business. Phone numbers are passed to our calling provider only to place the call, and consent is never shared for marketing.

Who we share it with

Only with the service providers that run the software, and only what each one needs:

• Vercel: hosting.
• Neon: database.
• Polar: subscription checkout and billing.
• Stripe: deposits and paid personal programs, paid directly into the business's own Stripe account.
• Resend: email delivery.
• Twilio: reminder calls.
• Google: the public business listing and reviews a ReviewLift business connects.
• Google Ads: ad measurement on the SalonBook and ClinicFlow sales pages, as described above. Google's own privacy policy applies to the data its tag collects.

We may also disclose data when the law requires it. These providers may process data in the United States and other countries.

How long we keep it

While a subscription is active. When it ends, everything the business built in the app (bookings, clients, messages, plans, feedback and credits) is deleted. We keep the owner's login so they can come back, and the list of numbers that asked not to be contacted again so those people stay opted out. An owner can ask us to delete their account entirely.

Security

Connections are encrypted, passwords are hashed, payment keys are encrypted, and each business can only see its own data.

Your choices and rights

You can ask to see, correct or delete your personal data, or object to how it is used, by emailing us. If a business entered your data, we will pass the request to that business or handle it together with them. We answer within 30 days.

Children

Our services are not directed at children under 13.

Changes and contact

If this policy changes, we update the date at the top. Questions: support@getsalonbook.com.