Privacy Policy

1 Who we are

NailEOD (“NailEOD,” “we,” “us,” or “our”) is software that helps nail salons run and reconcile their end-of-day close-out. The marketing site lives at naileod.com and the product itself at app.naileod.com. NailEOD is operated from Vancouver, British Columbia, Canada. You can reach us any time at [email protected].

2 Salon owners vs. their staff

NailEOD is sold to salon owners, and most of the personal information in the system is about a salon's own team. It matters who is responsible for that data:

• For a salon's staff data (technicians' and receptionists' names, PINs, phone numbers, clock times, service and tip figures), the salon that subscribes is the data controller — it decides what to collect and why. NailEOD acts as a data processor, handling that information on the salon's behalf and under its instructions. If you're a technician or receptionist with a question about your data, please start with your salon owner or manager.
• For the salon owner's own account and billing information, NailEOD is the controller.

Salon owners are responsible for telling their staff that NailEOD is in use and for obtaining any consent their local laws require — particularly for location-checked clock-in.

3 What we collect

Account & salon information

• Salon name, business email, time zone, and (optionally) an uploaded logo.
• The owner's administrator PIN, stored only as a one-way cryptographic hash — never in plain text.
• Subscription plan and billing status (see Payments & billing).

Staff information (entered by the salon)

• Each technician's and receptionist's display name and sort order.
• A personal 4-digit PIN, stored only as a one-way hash.
• An optional phone number, used for identification and PIN recovery.
• An optional profile photo, either uploaded or pulled from a linked Google account.
• An optional linked Google account. If a staff member chooses to sign in with Google, we store their Google email address and Google account identifier so we can match the sign-in to the right person. We request only basic profile and email information — never access to their Gmail, contacts, or files.

Operational data (entered during the day)

• Daily service amounts, tips (cash and card), and turn counts per technician.
• Clock-in / clock-out times and break intervals.
• End-of-day tally figures: card totals, gift-card sales and returns, cash counted, and the resulting over/short.
• Pay-period records the owner marks as paid.
• An edit history of changes to a day sheet, so figures can be traced to who entered them and when.

Website enquiries

• If you request a trial, we collect your salon name, your name, email, phone number, team size, and how you heard about us.
• If you send a message through our contact form, we collect your name, email, and the message itself.

Technical information

• Standard server logs (such as IP address and request time), used to keep the service running, secure, and free of abuse.
• A session cookie that keeps you signed in (see Cookies & sessions).

4 Location at clock-in

When a staff member clocks in, NailEOD asks their device for its current location and checks whether it falls within a radius the salon sets around its address. This is what lets the salon confirm that someone is actually on-site when they clock in.

Location is only ever requested at the point of clocking in or out; NailEOD does not track staff location during the day or in the background.

5 How we use it

We use the information above to:

• Provide the day-sheet, clock-in, tip-tracking, tally, and reporting features.
• Authenticate users and keep salons' data separated from one another.
• Confirm on-site clock-in when a salon enables it.
• Process subscriptions and send billing and service-related messages.
• Respond to trial requests and contact-form enquiries.
• Keep the service secure, diagnose problems, and prevent abuse.

We do not sell your personal information, and we do not use it for third-party advertising.

6 Payments & billing

Subscription payments are handled by Stripe, our payment processor. Card details are entered directly with Stripe and processed on their systems — NailEOD never sees or stores full card numbers. We keep only the billing identifiers Stripe gives us back (such as a customer ID, subscription ID, current plan, and renewal date) so we can show your billing status and manage your subscription. Stripe's handling of payment data is governed by Stripe's Privacy Policy.

7 Who we share it with

We share information only with the trusted service providers that make NailEOD work, each acting on our behalf under a contract and its own privacy commitments, and only to the extent needed to provide their service to us. We don't sell your data and we don't share it for anyone else's marketing. The providers we rely on fall into these categories:

• Payments — subscription billing is handled by our payment processor, Stripe. Card details go directly to Stripe; we never see or store them.
• Sign in with Google — if a user chooses this option, we exchange basic profile and email information with Google to complete their sign-in.
• Cloud hosting & storage — a reputable third-party cloud provider hosts the application and stores salon and staff data on our behalf.
• Email delivery — an email provider delivers transactional messages such as a PIN-reset link or a copy of a contact-form message to us.
• Scheduling — if you book an intro call from our website, a scheduling provider handles that booking.

We're happy to identify the specific providers in any of these categories on request — just email [email protected]. We may also disclose information if required by law, or to protect the rights, safety, and security of NailEOD, our customers, or the public. If NailEOD is ever involved in a merger or acquisition, data may transfer as part of that transaction, subject to this policy.

8 Cookies & sessions

NailEOD uses only the cookies it needs to function — there are no third-party advertising or cross-site tracking cookies:

• A session cookie that keeps you securely signed in after you enter your PIN.
• A short-lived sign-in cookie used during the “Sign in with Google” flow.

Your light/dark theme choice for the app is stored locally in your own browser and is never sent to us. The marketing website does not run analytics or advertising trackers.

9 Data retention

We keep a salon's day sheets, settings, and history for as long as the account is active, so past nights stay available for reference. If your trial ends or you cancel, your data is not deleted — it stays as you left it so you can pick up where you stopped if you return.

You can ask us for an export of your data, or for it to be deleted, at any time by emailing [email protected]. We'll honor deletion requests except where we're required to retain certain records (for example, billing records for tax purposes).

10 How we protect it

• All traffic is encrypted in transit over HTTPS.
• PINs are stored only as one-way cryptographic hashes, never as readable numbers.
• Each salon's data is isolated so one salon can never see another's.
• Repeated failed PIN attempts are rate-limited and temporarily locked out to deter guessing.
• Signed-in sessions expire after a period of inactivity.

No system can be guaranteed perfectly secure, but we take reasonable, industry-standard measures to protect your information and we continue to improve them.

11 Your rights & choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain uses. Because NailEOD is operated from Canada, we handle personal information in line with Canadian privacy law (PIPEDA), and we're happy to honor comparable requests wherever you are.

If you're a salon's technician or receptionist, the fastest route is usually your salon owner, who controls your data in NailEOD. You can also contact us directly at [email protected] and we'll help route the request. We won't discriminate against you for exercising any of these rights.

12 Children

NailEOD is a workplace tool and is not directed to children. We don't knowingly collect information from anyone under the age of majority in their jurisdiction, and staff accounts are intended for people of legal working age. If you believe a child's information has been provided to us, contact us and we'll remove it.

13 Changes to this policy

We may update this policy as NailEOD evolves. When we do, we'll revise the “Last updated” date at the top, and for material changes we'll make a reasonable effort to notify salon owners. Continuing to use NailEOD after an update means you accept the revised policy.

14 Contact us

Questions, requests, or concerns about privacy? Email [email protected] and we'll get back to you.

This Privacy Policy is provided for transparency and is not legal advice.