Privacy Policy — SalonOS

Last updated 23 July 2026

1. Who we are

SalonOS is operated by FOUNDRAI LIMITED (New Zealand company number 9374196), 3a Erewhon Crescent, Wanaka 9305, New Zealand (“SalonOS”, “we”, “us”). You can reach us any time at codie@foundrai.co.nz.

This policy explains how we handle personal information across the SalonOS web app, the SalonOS iOS app, and this website. It is written to meet the New Zealand Privacy Act 2020. Where a salon operates in Australia, the Australian Privacy Principles (Privacy Act 1988) also apply and we honour them.

2. Two different roles — this matters

SalonOS handles two kinds of personal information, and our responsibilities differ for each:

Your account data — we are the controller. The name, email, salon details and billing information you give us to run your SalonOS account. This policy governs how we use it.

Your clients’ data — you are the controller, we are the processor. The client records, appointments, notes, messages and sales you enter belong to your salon. We only store and process that information to provide the service to you, on your instructions. We never sell it, mine it for advertising, or use it for our own purposes.

3. What we collect — account data

Identity & contact: your name, email address, salon/business name, and phone number.
Billing: your subscription plan and payment status. Card payments are handled by Stripe — we never see or store your full card number.
Usage & diagnostics: log data, device/app version, and error reports, used to keep the service running and to fix problems.

4. Your clients’ data — processed for you

To do its job, SalonOS stores the information your salon chooses to keep about its clients — for example names, contact details, appointment history, service and colour notes, message history and purchase records. We process this solely to provide SalonOS to you (showing your book, sending reminders you configure, running your till and reports). Your clients should direct any request about their information to your salon, as the business that holds it; we will support you in responding.

5. How we use information

To provide, secure and improve the SalonOS service.
To take payment for your subscription and send service and billing notices.
To send messages (SMS/email) to your clients at your direction and on your behalf — see our Terms on messaging consent.
To respond to your support requests.
To meet legal obligations.

We do not sell personal information, and we do not use your clients’ data to target advertising.

6. The services we rely on (sub-processors)

We use a small set of trusted providers to run SalonOS. Each only receives the data needed for its function:

Provider	Purpose	Location
Supabase	Encrypted database, authentication & file storage	Managed cloud
Vercel	Application hosting & delivery	Managed cloud
Stripe	Subscription payments (card data held by Stripe, not us)	Managed cloud
SMS carrier	Delivering the texts you send to clients	NZ / AU
Anthropic	The optional “Ask SalonOS” AI add-on, when enabled	Managed cloud

If you do not enable the AI add-on, no data is sent to the AI provider. We keep this list current; contact us for the latest.

7. How we keep it safe

Data is encrypted in transit (HTTPS/TLS) and at rest.
Every salon’s data is isolated at the database level so one salon can never see another’s. Access is enforced per account.
Staff access inside a salon is limited by role.
We restrict internal access to what is needed to operate and support the service.

8. Keeping, exporting and deleting data

While you subscribe, we keep your data so the service works.
Export on exit: you can ask us for an export of your salon’s data at any time.
Deletion: if you close your account, we will delete or de-identify your salon’s data within a reasonable period, except where we must keep limited records to meet legal or accounting obligations.
On request: you (or, via you, your client) can ask us to correct or delete specific information.

9. Your rights

Under the NZ Privacy Act 2020 you have the right to access and correct personal information we hold about you. Australian salons and their clients have equivalent rights under the Australian Privacy Principles. To exercise a right, email codie@foundrai.co.nz and we will respond promptly.

10. Data breaches

If a privacy breach occurs that is likely to cause serious harm, we will notify affected customers and the Office of the Privacy Commissioner (NZ) — and, for Australian data, the OAIC — as required by law, and work with you on next steps.

11. Overseas storage

Our providers may store or process data on servers outside New Zealand. Where they do, we require protections comparable to those under the Privacy Act.

12. Children

SalonOS is a tool for businesses and is not directed at children. We do not knowingly collect data directly from children through the app.

13. Changes to this policy

We may update this policy as the service evolves. We will change the “last updated” date above and, for material changes, let account holders know.

14. Contact & complaints

Questions or concerns: codie@foundrai.co.nz. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner at privacy.org.nz (NZ) or the OAIC at oaic.gov.au (AU).