Salonly is a salon directory and appointment-request service operated by FMC Software (“we”). This policy covers the Salonly website and directory, the appointment request form, the salon panel, the customer portal and the Salonly mobile app. It explains what we store, why, who can see it, and how to get it changed or deleted.
Who the data belongs to
Two kinds of people use Salonly. Salons (owners and their staff) run their book through the panel and the app. Customers book visits with a salon. A customer’s card belongs to the salon they visit: the salon is the business you have a relationship with, and we process that data on the salon’s behalf.
When you ask a salon for an appointment through the directory, the request comes to Salonly first. We handle it and pass it on to the salon as described below, so for requests we are the business you are dealing with.
What we store
Salon listings in the directory
- Business details compiled from public business records: name, address, category, public rating, and estimated prices and hours for the area.
- A business e-mail address from those records, when there is one. We use it only to send the salon the requests people make, and it is not shown on the listing.
When you ask a salon for an appointment
- What you enter in the form: your name, phone number, e-mail address (optional), the services, the day and part of the day, and your note.
- The IP address and browser type (user agent) your browser sends with the form.
- Where your visit started: the first page you opened on the site, the domain of the website that sent you there, any campaign tags in that link, and the page you sent the form from. Your browser keeps this in the tab’s session storage (not a cookie) and sends it only inside a request you submit.
When we e-mail a salon about a request
- The address we wrote to, the e-mail we sent (with its sign-in and unsubscribe links masked), and what happened to it: delivered, opened, bounced, marked as spam, unsubscribed. Our e-mails to salons contain a small tracking image and links that tell us whether they were opened and whether the salon entered its panel.
- Addresses that asked not to receive our e-mails, so that they never get another one.
When you write to us or ask us to remove a listing
- Contact form: your name (optional), e-mail address, message, the page and listing it came from, IP address and browser type.
- Listing removal: the listing and the IP address the request came from.
For salons and staff
- Business details you enter: salon name, address, phone, email, opening hours, services, prices.
- Staff accounts: name, email or phone, role, working hours and time off.
- The appointment book, ledger entries, campaign and review settings.
- Photos you upload of your salon, and the text you attach to them.
For customers
- Your name, email, phone number and, if you choose to add it, your birthday.
- Your visits: service, staff member, date and time, price, and any note the salon made.
- Reviews you leave, and whether you agreed to receive marketing from that salon.
From the app and website
- Sign-in credentials (email or phone, and a sign-in code) — stored hashed by our authentication provider.
- A push-notification token, only if you turn on notifications. It identifies your device to the notification service; we cannot read anything else from it.
- Server logs with IP address and request time, kept for security and deleted on a rolling basis.
- Abuse-prevention counters for our public forms, keyed by IP address, phone number, e-mail address or listing. Each holds only a count and a time.
- Maps on listing and search pages load their map images from OpenFreeMap, which receives your IP address the way any website you load an image from does.
The website and the Salonly app contain no advertising, analytics or tracking SDKs, and the website sets no advertising cookies. We do not sell personal data and we do not use it to build advertising profiles.
Why we use it
- To pass your appointment request to the salon, tell you what the salon answered, and follow up when the salon has not answered yet.
- To learn which pages and searches lead people to send requests, so we can improve the directory.
- To keep the directory accurate, and to handle corrections and removal requests.
- To run the book: show open times, take bookings, send reminders the salon has turned on.
- To show the salon’s listing and its public reviews in the directory.
- To keep accounts secure: sign-in, rate limiting, fraud and abuse prevention.
- To send you marketing from a salon only if you agreed to it — you can withdraw in the app at any time.
Who sees it
- Salonly staff see every appointment request in full, in our admin desk and in a notification sent to our private operator chat on Telegram. That notification includes your name, phone number, e-mail address, note and where your visit started.
- The salon you asked first sees your first name, the services, the day and part of the day, and your note with any phone number or e-mail address taken out. Your full name, phone number and e-mail address reach the salon only when it confirms your request.
- The salon you visit sees your card and your visits with them. Salons do not see each other’s customers.
- Service providers that run parts of the product for us: Supabase (database and sign-in), Hetzner (our servers, in Germany), Brevo and Resend (e-mail delivery: request e-mails to salons, e-mails to customers, sign-in codes and our own notices), Telegram (notifications to our staff), OpenFreeMap (map images), Stripe (if a salon pays us), and the Apple and Google push-notification services. They process data to provide their service to us.
- Nobody else, unless the law requires it.
Our database and servers are in the European Union (Germany).
How long we keep it
A salon’s book is a business record: appointment history stays as long as the salon keeps its account, because it backs invoices and taxes. When a salon closes its account, its data is deleted within 90 days. Server logs are kept for at most 30 days.
For appointment requests we run a deletion schedule once a day. The IP address and browser type saved with a request, a contact form message or a removal request are cleared after 30 days. 180 days after the day you asked for, your name, phone number, e-mail address and note are removed from the request; we keep only what it was for (the salon, the services and the day). The text of the e-mails we sent about a request is deleted after 90 days, and the log entry that an e-mail was sent after 12 months. Notifications in the salon panel and the customer portal are deleted after 180 days.
Messages sent through our contact form are kept while we need them to answer you and keep our business records, and we delete them sooner when you ask (see below). Notifications in our operator chat stay there until we delete them. Abuse-prevention counters count only within their window (one hour to one day).
Your choices and rights
- Appointment requests: to see, correct or delete a request you sent, write to us through our contact form with the salon and the day, and we answer by e-mail.
- Salon owners: correct or remove your listing from the listing page or through the contact form, and stop request e-mails with the unsubscribe link in any of them.
- See and export everything held about you: Account → Download my data in the app.
- Correct your details: Account → Edit my details.
- Delete your account: Account → Delete my account. This removes your sign-in, portal access and device tokens immediately. The salon’s own record of your visits stays with the salon — it is their business record — and you can ask the salon to remove your contact details from it.
- Marketing: switch it off per salon in Edit my details, or use the unsubscribe link in any email.
- Notifications: turn them off in your phone’s settings at any time.
If you are a California resident, the rights above are how we honour the CCPA/CPRA rights to know, delete, correct and opt out. We do not sell or share personal information for cross-context behavioural advertising.
Children
Salonly is for adults. Customer accounts are created only from a salon’s invitation; we do not knowingly hold accounts or appointment requests for anyone under 16.
Changes
When this policy changes we update the date at the top and, for material changes, tell salons by email before they take effect.
Contact
FMC Software · contact form