Privacy Policy

1. Overview and who is responsible

not yet configured operates Braid Shift (the "Service"). This policy explains what personal information the Service collects, why we collect it, who it is shared with, how long we keep it, and the choices you have. not yet configured

This policy describes the Service as it is actually built. If we add a feature that changes what we collect, we will update this policy and, where the change is material, ask you to review it.

2. Information you give us

• Account details: your email address, your password (handled by our authentication provider — we never see it in readable form), your name, and the role you choose (braider, salon owner or client).
• Profile details: for braiders, your name, phone number, city or area, travel radius, years of experience, specialties, services offered, bio, credentials, transportation and pay preferences; for salons, your salon name, owner name, phone, address and map location, description, services offered, number of stations, and tax identification number where you provide one.
• Photos and content you upload: profile photos, salon logos and photos, portfolio images, style gallery photos, feed posts, comments and reviews.
• Availability and activity details: the days and hours you mark as available, shifts you post or save, applications you send, bookings you make, and messages you exchange with other users.
• Payout details: the account holder name, bank name, account type, routing number and account number you give us so we can pay you.
• Support and report details: anything you write when you report a user or listing, or contact us about a policy, privacy or legal request.

3. Information created as you use the Service

• Transaction records: shift payments, booking deposits, subscription charges, platform fees and commissions, payouts and their status.
• Booking records: the service booked, date, time, duration, price, deposit, notes, and status (such as confirmed, completed or cancelled).
• Ratings and reviews you give and receive.
• Notification history and, for features that use them, the records needed to show you the right in-app alerts.

4. Payment information

Card payments for subscriptions, shift payments and booking deposits are processed by our payment provider, Base44 Payments. Your card details are entered with the payment provider and we receive only the information needed to confirm and record the transaction — such as the amount, currency, status and a transaction reference. We do not store your full card number.

Bank account details you provide for payouts are stored in our database and are visible only to you and to platform administrators who process payouts. They are not shown to other users.

5. Location and map information

Braiders provide a city or area and salons provide an address; the Service converts addresses into map coordinates so that shifts, salons and braiders can be shown on a map and matched by distance. Location is not tracked continuously and the Service does not access your device's GPS.

Map tiles and images that appear in the app are loaded from third-party providers, which receive your IP address and browser details as part of serving those files.

6. Technical and log information

Our hosting and database provider records standard technical information — such as IP address, device and browser type, and request timestamps — in operational logs used for security, debugging and reliability. We do not run advertising trackers or cross-site marketing pixels in the app, and we do not sell personal information.

If we add product analytics or advertising technology in the future, we will update this policy and, where required, ask for your consent first.

7. How we use information

• To create and secure your account, and to determine what you are allowed to see and do.
• To run the marketplace: publishing and matching shifts, showing profiles, taking applications, confirming assignments, and handling bookings.
• To process payments, deposits, subscriptions and payouts, and to calculate fees and commissions.
• To send service messages: application updates, booking confirmations and cancellations, shift reminders, payout notices and payment-related emails.
• To provide support, answer your questions, and handle policy, privacy and legal requests.
• To protect the Service and its users: investigating reports, detecting fraud or abuse, enforcing our Terms and Acceptable Use Policy, and preventing misuse.
• To meet our legal, tax and accounting obligations and to respond to lawful requests.
• To keep the Service reliable and improve how it works.

8. Who can see what

• Public: braider and salon profiles (name or business name, photos, services, specialties, general location, ratings, reviews and posts) are visible to other users and, for salon and braider profiles, to visitors. The style gallery is visible to users of the app.
• Counterparties: a salon sees a client's name and contact details for a booking the client made with that salon; a client sees the salon's address, service details and booking status; a braider sees the details of a shift they applied for; a salon sees a braider's application and profile.
• Messages: visible to the participants in the conversation.
• Restricted: your email address, phone number, payout bank details, earnings, payouts, payment records and reports you file are not shown to other users.
• Administrators: platform administrators can access records — including messages, bookings and payout details — when it is necessary for support, safety, moderation, fraud prevention, or a legal obligation.

9. Sharing with service providers and others

• Hosting and database: our application platform stores and serves the app's data.
• Payments: Base44 Payments processes card payments and settles funds; the provider receives the information needed to complete and verify a transaction.
• Email: transactional emails are sent through an email provider's API from a mailbox the operator controls.
• Maps, images and fonts: tile, image and font providers receive the request details needed to serve their files to your browser.
• Search performance: the operator may view aggregate search-performance reports about the app's public pages; these do not identify individual users.
• Professional advisers and authorities: accountants, auditors and lawyers where necessary, and law enforcement or regulators where we are legally required to disclose, or where disclosure is necessary to prevent harm or investigate suspected unlawful activity.
• A business transfer: if the business is sold or merged, information may transfer as part of that transaction, subject to this policy.
• We do not sell your personal information, and we do not share your bank account details with other users.

10. Cookies and local storage

• The app stores a login token in your browser's local storage so that you stay signed in between visits. Signing out or clearing your browser storage removes it.
• Your browser may also hold small preference values and cached files that make the app load quickly.
• We do not set advertising cookies, and we do not use third-party cross-site tracking or marketing pixels inside the app.
• Because the app relies on these essential mechanisms to work, blocking them will prevent you from signing in.

11. How long we keep information

• Account and profile information is kept while your account is active.
• Content you post stays until you delete it or delete your account.
• Financial and transaction records — payments, deposits, commissions, earnings, payouts and booking history — are kept after account deletion where necessary for accounting, tax, dispute resolution, fraud prevention and legal compliance. Where a record is kept, we remove direct contact details where we can.
• Support, report and moderation records are kept as long as needed to handle the matter and to recognise repeat behaviour.
• Operational logs are kept for a short period for security and debugging.
• Backups may retain copies of deleted data for a limited period before they are overwritten.

12. Security

• Access to records is controlled on the server, not just in the interface: each record type has access rules that limit reads and writes to the people entitled to them, and administrative actions require an administrator role.
• Actions that change account, payment or subscription state are checked on the server, so a user cannot unlock a paid feature or alter someone else's record by editing what the browser sends.
• Passwords are handled by our authentication provider, and payment card details are handled by the payment provider — we do not store either.
• API keys and service credentials are held in server-side configuration and are never included in the app's browser code.
• Data is transmitted over encrypted connections (HTTPS).
• Security limitations: no system is completely secure, and no method of transmission or storage can be guaranteed. Administrative access is broad by design — administrators can see records needed to run the marketplace and process payouts — so access is limited to people the operator authorises.
• If you believe you have found a security problem, tell us at not yet configured and give us a reasonable chance to investigate before disclosing it publicly.

13. Your choices and rights

• View and correct: you can see and edit your profile and account information in the app at any time.
• Download: Settings lets you download a copy of the personal information the app holds about you.
• Delete: Settings lets you delete your account, which removes your profile and personal content and closes your account. Some records are retained as described in section 11.
• Ask: for anything else — access, correction, a copy of your data, restriction of processing, an objection, or a privacy question — use the Contact & Legal Requests page or email not yet configured.
• Depending on where you live, you may have additional rights over your personal information (for example access, correction, deletion, portability, restriction, objection, and protection against discriminatory treatment for exercising them). Tell us which right you are exercising and where you are located, and we will handle it.
• We may need to verify your identity before acting on a request, and we may keep records where the law requires or permits it. Requests are handled within the time required by applicable law.
• Your agreements: the app records which version of the Terms you accepted and when. You can review the current versions at any time from the Legal section.

14. Automated decisions

We do not use automated decision-making that produces legal or similarly significant effects about you. Whether a paid feature is available is determined automatically from your payment or subscription records, and reports and account restrictions are reviewed by a person.

15. Where information is processed

Our providers may store and process information in the United States and in other countries where they operate. Where required, transfers rely on the safeguards the provider puts in place. Contact us if you need details about a specific provider.

16. Children

The Service is for adults aged 18 and over. It is not directed to children, and we do not knowingly collect information from anyone under 18. If you believe a minor has created an account, contact us and we will remove it.

17. Changes to this policy

When we change this policy we publish a new version and update the date. Material changes are surfaced in the app, and where the change affects how we use your information we will take the steps required by applicable law before applying it to information we already hold.

The current version is 1.0, effective not yet configured.

18. Contact

Privacy questions and requests: not yet configured. You can also use the Contact & Legal Requests page in the app. not yet configured