REPOVIC.DEV LLC d/b/a Softalon, ("we," "us," "our") provides salon booking, scheduling, and client management services through softalon.com and related applications (the "Services"). This Privacy Policy describes how we collect, use, disclose, and process information about you.

Our Services are provided to salon businesses ("Businesses") and individuals who create accounts to use our platform ("Account Holders"), as well as Members (salon staff with Softalon accounts) and Clients (individuals who book appointments or are added to a salon's client management system). Our relationship with you varies depending on how you interact with our Services.

Important Distinction: When we process information on behalf of a Business (such as Client and Member data), we act as a service provider and data processor. We process that information only in accordance with the Business's instructions. The collection, use, retention, and deletion of that information is controlled by the Business and subject to their privacy policy. Please refer to the Business's privacy policy for more information about how they handle your data.

This Privacy Policy applies to information we collect about Account Holders (Softalon account creators) and our own use of information. It does not apply to information we process as a data processor on behalf of Businesses, except as required by law (e.g., for California residents).

Users must be at least 18 years old to create an account. We may update this Privacy Policy from time to time. Material changes will be posted with notice. Continued use of our Services signifies acceptance of any changes.

1. Data Protection Officer and Contact

Softalon has not appointed a Data Protection Officer (DPO) as one is not required for our organization. All privacy inquiries, requests, and concerns should be directed to [email protected]. We are committed to responding to all inquiries within 30 days.

2. Collection of Information

The information we collect depends on how you interact with Softalon. We describe below the categories of information we collect and the sources.

2.1 Information You Provide Directly to Us

Account Creation: When you create a Softalon account, we collect your first name, last name, email address, and phone number (optional). You may also upload an avatar image to personalize your account.

Third-Party Login: If you sign in to Softalon via Google, Facebook, or Microsoft, we receive the information that platform shares with us (such as your name, email, profile picture, and publicly available information) according to your authorization.

Salon Setup: If you create a salon within Softalon, we collect the salon name, service category, descriptions of services, locations, customization preferences, theme selections, and images you upload to display your salon's work and customizations. These are considered User Content, and you retain control over them.

Billing Information: When you set up a salon and elect to accept payments, we collect your billing address for invoicing purposes. Payment card details are not collected or stored by Softalon; they are processed directly by our payment processor.

Member Information: When you add team members to your salon, we collect their first name, last name, email address, phone number, and avatar image (if provided).

Client Information: When you or a Client adds information to your salon's client management system (whether through direct entry, online booking, or our AI assistant), we collect the Client's first name, last name, email address, phone number, notes, and any custom fields you define. Clients may also provide additional information at your request. You are responsible for obtaining necessary consents from Clients before providing their personal information to us.

Integration Connections: Depending on which integrations you enable, we connect securely to external services using industry-standard OAuth 2.0 and API authentication. Integration connection credentials (API keys, OAuth tokens) are encrypted and never stored in plain text. We collect and store only the data necessary to provide the integration:

Calendar Integrations (Google Calendar, Office 365): The name of the connected account, event titles, event times, and event IDs. We do not collect event descriptions to protect privacy. See Google Calendar Developer Terms and Microsoft Office 365 Privacy Addendum.
Payment Integrations (Stripe, PayPal, Square): The name of the connected account. We store references to payment objects created within these systems but do not collect or store payment card details or sensitive financial information directly. See Stripe Privacy Policy, PayPal Privacy Statement, and Square Privacy Policy.
Conversation Integrations (WhatsApp, Messenger): Message content you send and receive, sender names, phone numbers, or social account identifiers associated with the conversation. These integrations use OAuth 2.0 authentication and are subject to the privacy policies and terms of the respective platforms. See Meta Privacy Policy, Meta Developer Terms, and WhatsApp Business Privacy.
Marketing Integrations (Brevo, Mailchimp, Klaviyo): The name of the connected account and the destination list ID where you wish to add Clients. When you choose to send a Client's name, email, and phone number to a marketing platform, we facilitate that transfer only for Clients who have consented to marketing communications. See Brevo Privacy, Mailchimp Privacy, and Klaviyo Privacy.
Analytics Integrations (Google Analytics, Meta Pixel, Google Tag Manager): The connection ID or container ID you provide so we can track analytics on your online booking website and publish data back to your analytics account. See Google Analytics Privacy and Meta Privacy.

User-Generated Content: You may submit feedback, communicate with us via support channels, upload photos, or provide other content. We retain this information as needed to provide support and improve our Services.

Softalon Payments: When you enable Softalon Payments, transaction data (payment amounts, status, and booking references) is processed by Whop, our built-in payment infrastructure provider. Softalon does not store your payment card details. When you request a withdrawal of funds to your bank account, Whop will collect identity verification information (such as a government-issued ID and a selfie) directly from you for compliance purposes. This information is handled solely by Whop and is subject to their Privacy Policy and Terms of Service. Softalon does not store your identity verification documents.

Softalon Meet (Video Meetings): When you use Softalon Meet to conduct video consultations or appointments, audio and video data from your session is transmitted through and processed by Daily.co, our video infrastructure provider. Softalon does not record meetings by default. Your IP address and device information are transmitted to Daily.co's servers to establish the connection. This processing is subject to Daily.co's Privacy Policy and Terms of Service. If you choose to enable recording for a session, participants should be informed and consent should be obtained in accordance with applicable law.

2.2 Information We Collect Automatically

Device and Usage Information: We automatically collect information about how you access our Services, including your IP address, browser type and version, operating system, device type, unique device identifiers, and mobile network information. We collect activity data such as pages visited, links clicked, features used, login/logout times, and time spent on our Services. This helps us understand usage patterns, improve the platform, and prevent fraud and abuse.

Cookies and Tracking Technologies: We use cookies and similar technologies (pixels, SDKs) to improve your experience, remember preferences, and analyze how you use our Services. These technologies help us count visits, understand which features are popular, detect and prevent fraud, and provide analytics. For information about managing cookies and your choices, see the "Your Choices and Rights" section below.

Transaction Information: We collect information about payments you initiate through Softalon, including transaction dates, amounts, parties involved, and payment methods used.

Chat and Communication: If you use our chat feature or contact customer support by phone, we may monitor and retain those conversations for support, training, and improvement purposes.

2.3 Information from Third Parties and Other Sources

We obtain information from external sources to enhance security and fraud prevention:

Payment and Verification Providers: We use third-party services for payment processing, fraud detection, and identity verification. These providers may share verification results or transaction information with us as needed to process your transactions securely.
Third-Party Logins: If you sign in to Softalon via Google, Facebook, or Microsoft, we receive the information that platform shares with us according to your authorization.
Publicly Available Information: We may use publicly available data for fraud prevention and security purposes.

3. Use of Information

We use the information we collect for the following purposes:

Service Delivery: To provide, maintain, and improve Softalon and its features; process payments and invoices; manage your salon profile; schedule appointments; send booking confirmations and reminders; and respond to support requests.

Account Management: To authenticate users, manage account settings, send technical notices and security alerts, and communicate about your account.

Communication: To send transactional messages (bookings, confirmations, reminders), respond to inquiries, and send service updates.

AI Features: To power our AI assistant that responds to incoming messages and provides scheduling suggestions. For these AI features, we may use third-party AI providers to process and analyze data you provide. Important: AI-generated responses may be inaccurate, incomplete, or inappropriate. As these responses are generated automatically in real-time, you should review AI responses as part of normal operations. We do not use Member, Client, or Salon data to train AI models or improve third-party AI services beyond the immediate request. Your data is not used for general model training.

Analytics and Improvement: To analyze usage trends, measure feature popularity, identify errors, and develop new features and services.

Fraud Prevention and Security: To detect, investigate, and prevent security incidents, fraudulent activity, abuse, and violations of our Terms of Service. IP address, device, and browser information help protect our platform and users.

Legal and Compliance: To comply with applicable laws, respond to lawful requests from authorities, enforce our agreements, and protect the rights and safety of Softalon, our users, and the public.

De-identification: We may de-identify or aggregate information so it cannot be linked to you, and we use aggregated data for analytics and business intelligence without attempting to re-identify it.

4. Integrations and Third-Party Services

Softalon integrates with external services to expand functionality. When you authorize integrations, you authorize us to access and process information from those services according to this Privacy Policy and their terms.

4.1 How We Handle Third-Party Data

We do not collect or control your data on third-party platforms. Instead:

For calendar and payment integrations, we store only necessary identifiers and account names to manage the connection.
For conversation integrations (WhatsApp, Messenger), we store messages you choose to sync to provide a unified inbox and enable our AI assistant to respond. These platforms' privacy policies apply to your original messages on those platforms.
For marketing integrations, we store only the account name and destination list ID. When you send Client information to a marketing platform, that platform's privacy policy governs their use of that data.
For analytics integrations, we store only your connection ID so we can report analytics to your analytics account. Platform-specific data policies apply.

Integration Scope:

Calendar integrations are connected per Account
Payment, Conversation, Marketing, and Analytics integrations are connected per Salon

4.2 Your Responsibility for Third-Party Data

By authorizing integrations, you confirm you have the right to share data with us and represent that you have obtained necessary consents from Members and Clients. You remain responsible for compliance with applicable privacy laws and the terms of third-party platforms.

4.3 Important: Google Calendar Compliance

If you use Google Calendar integration, ensure your use complies with Google's Limited Use Policy. Softalon has been verified by Google to access only the data necessary to provide calendar synchronization. Any additional use of Google Calendar data beyond what is described in this Privacy Policy may violate Google's terms.

4.4 Third-Party Service Providers

Softalon works with the following categories of service providers to deliver the Services. For the complete list of sub-processors and their privacy policies, please visit softalon.com/subprocessors.

Categories of Service Providers:

Cloud hosting and infrastructure providers
Payment processors
Email and SMS delivery providers
Security and fraud prevention providers
Analytics and monitoring providers
Customer support platforms

Each service provider processes Personal Data under a contractual data processing agreement that includes appropriate data protection safeguards.

5. Data Retention

Account Data: Information associated with your Softalon account is retained for as long as your account remains active. Upon account deletion, we retain your information for 30 additional days (unless legally required otherwise) to ensure no ongoing transactions or scheduled communications are affected, then delete it.

Payment and Legal Records: Payment records, invoices, and transaction information are retained longer as required by applicable tax, accounting, and financial regulations (typically 7 years for business records, unless legally required otherwise).

Salon, Member, and Client Data: As a processor on behalf of the Business, we retain this data according to the Business's instructions and for as long as the Business's account remains active. Upon Business account deletion, we retain the data for 30 days (unless legally required otherwise), then delete it.

Backup and Archival: Due to the nature of cloud storage, deleted data may persist in backup systems for a limited period before permanent deletion.

6. General Technical Information

Across all users of Softalon (Account Holders, Members, and Clients), we collect and use IP addresses, browser information, and device details for the following purposes:

Security: Detect and prevent unauthorized access, fraud, and abuse
Platform Stability: Identify and fix technical errors and performance issues
Analytics: Understand how users interact with our Services to improve features and user experience
Compliance: Maintain records necessary to comply with legal obligations

This information is essential to the safe and reliable operation of Softalon and is retained as long as necessary to fulfill these purposes.

7. Disclosure of Information

We disclose information as necessary to operate Softalon and as described below.

Service Providers and Vendors: We share information with third parties that assist us with hosting, payment processing, email and SMS delivery, fraud prevention, analytics, customer support, and other business functions. These providers are contractually obligated to protect your information and use it only to provide services to Softalon. For the complete, current list of service providers, see softalon.com/subprocessors.

Salon Data Disclosure: Information you control (salon profile, Client data, Member data) is disclosed to Members and Clients as appropriate for them to perform their duties and access bookings and schedules.

Legal Requirements: We disclose information if required by law, court order, or government request, or if we believe in good faith that disclosure is necessary to protect the rights, safety, or property of Softalon, our users, or the public.

Protection of Rights: We may disclose information if we believe you have violated our Terms of Service, engaged in fraudulent activity, or violated applicable law, and disclosure is necessary to protect Softalon's interests.

Business Transfers: If Softalon is involved in a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will provide notice if such a change occurs.

With Your Consent: We disclose information when you explicitly authorize us to do so or direct us to share it with a specific third party.

Aggregated and De-Identified Data: We may share aggregated or de-identified data that cannot reasonably identify you.

8. Security and Data Protection

Softalon is hosted on secure servers in the United States by established cloud infrastructure providers. We implement industry-standard technical and organizational measures to protect personal information, including:

Encryption of data in transit (HTTPS/TLS) and at rest using industry-standard algorithms
Access controls and authentication mechanisms, including multi-factor authentication where available
Regular security audits, penetration testing, and monitoring
Network security with firewalls, intrusion detection, and DDoS protection
Logical data isolation between customers
Incident response procedures for detecting and addressing security breaches
Regular backups and disaster recovery procedures

Integration Security: Integration connection credentials (API keys, OAuth 2.0 tokens) are encrypted and never stored in plain text. Credentials are securely transmitted using industry-standard encryption.

Data Breach Notification: In the event of a confirmed or suspected data breach affecting your personal information, we will notify affected users and relevant regulators without undue delay and, where required by law, within 72 hours of discovery. Notifications will include details of the breach, affected data categories, and recommended protective measures.

However, no system is completely secure. While we implement comprehensive safeguards, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

9. Cookies and Tracking

9.1 Cookies We Use

Softalon uses the following types of cookies:

Essential Cookies: Required for basic functionality (authentication, account management, security)
Analytics Cookies: Help us understand how you use Softalon (via Google Analytics and Meta Pixel) — non-essential, enabled only after consent
Performance Cookies: Improve page load speeds and service reliability
Session Cookies: Maintain your login session

9.2 Managing Cookies

Browser-Based Cookie Control: You can control cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. You can also manage analytics tracking by disabling it in your device settings.

Cookie Consent Banner: If you are located in Europe (EU/EEA/UK), we use a cookie consent banner on our website. Non-essential cookies, including Google Analytics and Meta Pixel, are only loaded and used after you provide explicit consent via the banner. You can adjust your cookie preferences at any time through the banner or your account settings.

Note: Disabling essential cookies may affect the functionality of our Services and your user experience. Disabling non-essential cookies will not impact core functionality.

9.3 Cookie Providers

For detailed information about specific cookies and tracking technologies we use, see our Cookie Policy.

10. Your Choices and Rights

10.1 Account Management

You can access, update, and delete information in your Softalon account at any time through your account settings.

10.2 Communications

You may opt out of promotional emails by clicking the unsubscribe link in any email or by changing your notification settings in your account. You may disable push notifications by adjusting your device settings. If you opt out of promotional communications, we will continue to send you transactional messages necessary for account management and Service delivery.

10.3 Cookies and Tracking

You can control cookies through your browser settings. You can also opt out of analytics and tracking through your device settings or by adjusting your preferences via our cookie banner. Note that disabling essential cookies may affect functionality of our Services.

10.4 Data Subject Requests

If you are a resident of certain jurisdictions (California, Europe, Canada, and others), you may have additional rights regarding your personal information.

Access and Portability: You can request a copy of the information we hold about you in a portable format.

Deletion: You can request deletion of your information, subject to certain legal exceptions (e.g., if we need to retain it for legal compliance or to fulfill a business purpose you authorized).

Correction: You can request we correct inaccurate information about you.

Opt-Out of Analytics: You can opt out of analytics and tracking through your device settings or browser preferences. We do not sell personal data or engage in targeted advertising as defined by applicable laws.

To exercise any of these rights, please contact us at [email protected] with "Data Subject Request" in the subject line. We will respond within 30 days of receiving your request (or as required by applicable law). We may ask you to verify your identity before processing your request.

10.5 Representatives and Authorized Agents

If you are a salon Member or representative acting on behalf of a Business, you may submit requests on behalf of that Business. If you are an authorized agent acting on behalf of a consumer (for example, a parent acting on behalf of a minor), please include proof of your authority when submitting requests.

11. Additional Information for Specific Jurisdictions

11.1 United States - State Privacy Laws

If you reside in California, Colorado, Connecticut, Delaware, Iowa, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia, you have rights under your state's privacy laws:

Right to Know: You may request information about the categories of personal information we collect, the sources of that information, our purposes for collection, and the categories of recipients with whom we share it.

Right to Delete: You may request deletion of personal information we have collected, subject to certain exceptions (such as if we need it to complete a transaction or comply with legal obligations).

Right to Correct: You may request that we correct inaccurate personal information.

Right to Opt-Out of Targeted Advertising: We do not sell personal data or engage in targeted advertising as defined by your state's laws.

Nondiscrimination: You have the right not to be discriminated against for exercising your privacy rights. We will not deny you services, charge different prices, or provide different service quality based on your exercise of privacy rights.

Appeals: If we deny your request, you may appeal our decision by contacting [email protected]. If we cannot resolve your concern, you may contact your state's attorney general.

To submit a request, email [email protected] with "Data Subject Request" in the subject line, and include your name, email, and the specific right you wish to exercise. We will verify your identity and respond within the timeframe required by your state's law.

11.2 European Union/EEA and United Kingdom

If you are located in the European Union, European Economic Area, or United Kingdom, the following applies:

Legal Basis for Processing: We process personal data based on the following lawful bases under the General Data Protection Regulation (GDPR):

Contract: To perform our obligations under our Terms of Service with you (e.g., providing the Services, processing payments)
Legitimate Interest: To operate, improve, and secure Softalon; conduct analytics; prevent fraud; and communicate with you about your account or the Services
Legal Obligation: To comply with applicable laws and respond to lawful legal requests
Consent: When you explicitly opt in to communications or certain data processing activities

Your Rights: Under GDPR, you have the right to:

Access your personal data in a portable format
Request deletion or restriction of processing
Object to processing based on legitimate interest or direct marketing
Withdraw consent at any time (without affecting the lawfulness of processing before withdrawal)
Lodge a complaint with your Data Protection Authority

To exercise these rights, contact [email protected]. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Data Protection Authority in your country:

European Union: https://edpb.europa.eu/about-edpb/board/members_en
United Kingdom: https://ico.org.uk/global/contact-us/
Switzerland: https://www.edoeb.admin.ch/edoeb/en/home/the-fdpic/contact.html

International Transfers: We are based in the United States. If we transfer personal data from the EU/EEA/UK to the United States, where required by applicable data protection law, we will implement appropriate transfer safeguards. Softalon will make documentation of such safeguards available upon request.

11.3 Canada

If you are a Canadian resident, the following applies:

Consent: By providing personal information to Softalon, you consent to our collection, use, disclosure, and transfer of that information as described in this Privacy Policy and as permitted or required by Canadian privacy laws.

Withdrawal of Consent: You may withdraw consent at any time by contacting [email protected]. If you withdraw consent, we may not be able to continue providing certain Services.

Anti-Spam Law (CASL): We will only send you commercial electronic messages ("CEMs") if you have expressly or implicitly consented. Implied consent exists if you are an existing customer or have contacted us within a certain timeframe. You may unsubscribe from CEMs at any time by clicking the unsubscribe link in the email or contacting us. Transactional messages (account updates, bookings) are not subject to unsubscribe requirements.

12. Children and Minors

Softalon is not intended for individuals under 18 years old. We do not knowingly collect personal information from minors. If we become aware that we have collected information from someone under 18, we will take steps to delete such information promptly.

For Businesses Using Softalon: If you use Softalon to manage a salon that serves minor Clients (individuals under 18), you are responsible for ensuring that you have obtained proper parental consent or legal authority before providing any personal information about minors to Softalon. Softalon relies on Businesses to ensure compliance with laws protecting minors' privacy. Inappropriate collection of minor data without proper consent may violate applicable laws and these Terms of Service.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the date at the top of this policy and, where appropriate, by sending you an email notification or displaying a notice on our website before the change takes effect. Your continued use of Softalon after changes have been posted constitutes your acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights, or have privacy concerns, please contact us:

REPOVIC.DEV LLC d/b/a Softalon
Email: [email protected]
Address: 30 N Gould St #50933, Sheridan, WY 82801, USA
Response Time: We will respond to all inquiries within 30 days.

Data Protection Officer: Softalon has not appointed a Data Protection Officer. All privacy inquiries should be directed to [email protected].

For data subject requests (access, deletion, correction) or if you believe we have violated applicable privacy laws, please include "Data Subject Request" in your email subject line and provide:

Your name and email address
A description of your request
Information to help us identify you in our systems

Sub-processors and Service Providers: For the complete, current list of our service providers and their privacy policies, visit softalon.com/subprocessors.

Data Processing Agreement: If you are a Business using Softalon, our Data Processing Agreement is available at softalon.com/dpa.

Effective Date: December 15, 2025

Last Updated: July 21, 2026

Politika privatnosti