Privacy Policy
Last updated: June 7, 2026
This policy explains what data BarberQueue collects, why we collect it, and how we protect it. By using BarberQueue, you agree to this policy.
What we collect
- Account data — shop name, email address, and your password (stored as a secure hash, never in plain text).
- Shop configuration — business hours, services, and settings you configure in the dashboard.
- Client data — names and phone numbers you record about your customers as part of normal barbershop operations.
- Appointment data — booking history, visit records, and loyalty points tied to your clients.
- SMS history — messages exchanged through our platform between you and your clients.
- Usage data — basic server logs (IP address, browser type, timestamps) used to keep the service running and detect abuse.
How we use it
- To provide the booking, scheduling, loyalty, and SMS automation features you signed up for.
- To send you important account notices and product updates.
- To detect, investigate, and prevent misuse of the platform.
- We do not use your data for advertising and we do not sell it to third parties.
Sub-processors
We rely on a small set of trusted providers to deliver the service. Each receives only the data necessary to perform their function:
- Supabase — database and authentication (data stored in the United States).
- Twilio — SMS delivery to your clients.
- Resend — transactional email (appointment reminders, reactivation campaigns).
- OpenRouter — AI-powered auto-replies to inbound client SMS messages.
- Vercel — application hosting (data processed in the United States).
Data retention
Your data is retained for as long as your account is active. On cancellation or termination, data is available for export for 30 days, after which it is permanently deleted.
Your client's data
You are the data controller for the client information you enter into BarberQueue. You are responsible for ensuring your clients are aware that their contact information is used to send appointment reminders and follow-up messages, as required under CASL and PIPEDA.
Your rights
Under PIPEDA (Canada's Personal Information Protection and Electronic Documents Act) you have the right to access, correct, or request deletion of your personal information at any time. To exercise any of these rights, email founder@barberqueue.pro. We will respond within 30 days.
Security
We use industry-standard security practices: encrypted connections (HTTPS), row-level security on the database, and hashed passwords. No system is perfectly secure — if you believe your account has been compromised, contact us immediately.
Changes to this policy
We may update this policy from time to time. We will notify active users by email before material changes take effect.
Contact
Questions about this policy? Email founder@barberqueue.pro.