Privacy Policy

Salon owners and staff — the people who hold a Tosk Hair account. We decide how their account information is handled, and this policy governs it directly.

Salon clients — people who book an appointment on a salon’s booking page, or who call a salon and speak to its AI receptionist. We handle this information on behalf of the salon. The salon decides what it collects and how it uses it; we process it to provide the service, under this policy and our agreement with that salon. If you are a salon’s client and want your information changed or deleted, the fastest route is to ask the salon directly — but you can also write to us at privacy@toskhair.com and we will pass it on or act on it.

From salon owners, to run the account

• Account and contact details: name, email address, and password credentials, which are held by our authentication provider and never stored by us in readable form.
• Business details: salon name and type, address, phone number, email, opening hours, timezone, services, prices, staff names and photos, and the booking, cancellation and payment policies the salon chooses to publish.
• Billing details: subscription status and the customer and subscription identifiers issued by our payment processor. Card numbers are entered directly with the payment processor and never reach our servers.
• Connection tokens for any calendar a salon chooses to link, used only to write that salon’s own appointments to its own calendar.

From salon clients, when an appointment is made

• Name, mobile phone number, and email address if one is given.
• Appointment details: the service, stylist, date and time, and the answers to any intake questions the salon chose to ask.
• Visit history with that salon: when they first booked, when they last visited, how many visits, and any notes salon staff add.

From phone calls the AI receptionist answers

• The caller’s phone number, and the name and email they give during the call.
• Call metadata: time, duration, whether it was outside opening hours, what service or stylist was asked for, and how the call ended.
• A written transcript of the call, and a recording of it. These let the salon see what was said and let us improve accuracy. Calls are answered by an automated assistant, which identifies itself as such. Recording and call handling laws vary by state; a salon using Tosk Hair is responsible for any call announcement its own jurisdiction requires.

Automatically, when the service is used

• Ordinary technical records kept by our hosting providers — IP address, browser type, pages requested and timestamps — used to keep the service running, secure and debuggable. We do not use advertising cookies or third-party tracking pixels.

• To answer a salon’s calls and book, change and cancel appointments.
• To send appointment confirmations and reminders — see the next section.
• To show a salon its own bookings, clients, call history and transcripts.
• To take subscription payments and provide support.
• To keep the service secure, prevent abuse, and meet our legal obligations.

We do not use salon clients’ personal information to market anything to them, and we do not use it to train general-purpose AI models.

What phone numbers are collected for. We collect a client’s mobile number so the salon can reach them about their appointment: to confirm a booking, to remind them before it, and to tell them if something about it changes. A salon may also call the number about that appointment.

Transactional messages only. Text messages sent through Tosk Hair relate to a specific appointment the client asked for. We do not send promotional, advertising or marketing text messages, and we do not allow salons to use Tosk Hair to send them.

Consent, and how to withdraw it. A client consents to appointment text messages by providing their mobile number on the booking form, where this is disclosed. Consent can be withdrawn at any time by replying STOP to any message, which ends texts to that number. Replying HELP returns contact information. Message frequency varies with the number of appointments booked. Message and data rates may apply.

Phone numbers and text message consent are never sold, rented or shared with third parties for marketing purposes. A client’s number is used only to contact them about their own appointments with the salon they gave it to. It is not shared with other salons, and it is not passed to advertisers, data brokers or lead generators. The only parties who ever handle it are the service providers listed below, who act on our instructions to deliver the service and for no purpose of their own.

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.

The full terms of the text message program — the program description, the frequency and rates statements, both keywords and the carrier statement — are published in our Terms of Service.

We share personal information with the service providers below, each of which is bound to use it only to provide its service to us. We do not sell personal information, and we do not share it for cross-context behavioural advertising.

We may also disclose information if required by law, to enforce our agreements, or to protect the rights and safety of our users — and, if the business is ever sold or merged, to the acquirer, who would remain bound by this policy.

• While an account is open — a salon’s account data, its bookings, client records, call logs, transcripts and recordings are kept so the salon can use them.
• After an account is cancelled — call logs, bookings and settings are retained for 90 days, then deleted.
• On request — we delete personal information when the salon or the individual asks us to, unless we are required to keep it. Write to privacy@toskhair.com.
• Records we must keep for tax, accounting or legal reasons are retained for as long as the law requires.

Depending on where you live, you may have the right to access a copy of your personal information, to correct it, to delete it, to limit how it is used, and not to be discriminated against for exercising those rights. Because we hold salon clients’ information on behalf of the salon, we will pass a request to the relevant salon where that is the right route, and tell you we have done so.

To make a request, email privacy@toskhair.com. We will respond within the time the applicable law allows. To stop text messages immediately, reply STOP to any message — no request to us is needed.

Information is encrypted in transit. Each salon’s data is separated from every other salon’s at the database level, so one salon’s account cannot read another’s clients, bookings or calls. Access by our own staff is limited to what is needed to run and support the service. No system is perfectly secure, and we cannot guarantee absolute security.

Tosk Hair is not directed at children under 13, and we do not knowingly collect their personal information. A parent or guardian who books an appointment for a child provides that child’s details themselves. If you believe a child has given us information directly, write to privacy@toskhair.com and we will delete it.

We will update this page when our practices change, and move the “last updated” date above. If a change materially affects how we use personal information, we will tell account holders directly.

Questions about this policy, or a request about your information: