Privacy Policy

1. Who is responsible

FadeBoard is operated by the operator of FadeBoard. For shop accounts we decide how data is used. For a shop's client information, the shop decides, and we act as the shop's service provider (processor). If you're a client, the shop you booked with is your main contact for your data, and you can also contact us.

2. What we collect

• Shop owners and staff: name, email, password (stored hashed by our authentication provider), shop details, schedules, and PayPal payment details you send us (PayPal email, Transaction ID, optional screenshot).
• Clients: name, email, optional phone number, appointments, walk-in line visits, notes the shop adds, reviews you write, and whether you showed up.
• Technical data: IP address and basic device information in server logs, used for security and to prevent abuse (for example, limiting repeated booking attempts). We don't use advertising cookies or cross-site tracking. We use only the cookies needed to keep you signed in.

3. How we use it

• To provide the service: bookings, the walk-in line, confirmation and reminder emails, reviews and reports.
• To prevent no-shows and abuse, as configured by each shop.
• To bill shops and verify payments.
• To keep the service secure, fix problems and improve it.

We don't sell personal information, and we don't share it for cross-context behavioral advertising.

4. Who we share it with

Only with providers that help us run FadeBoard, under contracts that limit how they use it:

• Supabase (database, authentication and file storage)
• Vercel (hosting)
• Resend (sending email)
• PayPal (when a shop pays us)

Shops see the information of their own clients. We may also disclose information if the law requires it or to protect people from harm. Our providers may store data in the United States and other countries.

5. How long we keep it

• Shop data: while the account is active, and for 90 days after a plan ends, then deleted.
• Client data: as long as the shop keeps it, or until the client asks the shop (or us) to delete it.
• Audit logs and billing records: up to 1 year, or longer where tax law requires.

6. Your privacy rights

Depending on where you live (including California and other US states with privacy laws), you can ask to know what we hold about you, get a copy, correct it, or delete it. We won't treat you differently for using these rights. Clients can ask the shop directly, which can export or delete their data from its dashboard, or contact us. We'll verify your request and answer within 45 days.

We honor Global Privacy Control (GPC) signals. Since we don't sell or share personal information, there's nothing to opt out of, but we treat a GPC signal as a request not to.

7. Emails

Emails about your appointments, walk-in line spot, reviews and billing are part of the service. We don't send marketing emails to clients. If we ever email shop owners about new features, every such email will have an unsubscribe link.

8. Children

FadeBoard is not meant for children under 13. Appointments for children (such as kids' cuts) should be booked by a parent or guardian using their own details.

9. Security

Data is encrypted in transit, each shop's data is separated with database-level access rules, and links in emails use secret tokens. No system is perfectly secure; if a breach affects you, we'll tell you as the law requires.

10. Changes

We'll update this page when our practices change and email shop owners about significant changes.

11. Contact

the operator of FadeBoard · use the contact details in your dashboard