Privacy Policy

1. Introduction

Klowd (“Company,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at www.klowd.software and our salon booking and management platform (collectively, the “Service”).

By using the Service, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not use the Service.

2. Information We Collect

Information you provide directly

• Account information: Name, email address, phone number, business name, and billing address when you create an account
• Payment information: Credit card details and billing information, processed and stored securely by our payment processor, Stripe. We do not store your full card number on our servers.
• Business data: Staff information, service menus, business hours, and salon configuration that you enter into the platform
• Client data: Information about your salon's clients that you store in the platform, including names, phone numbers, email addresses, appointment history, and notes
• Communications: Messages you send to us via email or support channels

Information collected automatically

• Usage data: Pages visited, features used, actions taken, and time spent on the Service
• Device information: Browser type, operating system, device type, and screen resolution
• Log data: IP address, access times, referring URLs, and error logs

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process your subscription payments
• Send transactional communications (account confirmations, billing receipts, service updates)
• Send email notifications to your clients on your behalf (appointment reminders, confirmations)
• Respond to your support requests and inquiries
• Monitor and analyze usage patterns to improve the Service
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations

We do not sell your personal information or your clients' personal information to third parties. We do not use your data for advertising purposes.

4. Data Sharing and Disclosure

We may share your information with:

• Service providers: Third-party vendors who assist in operating the Service, including Stripe (payment processing), Resend (email delivery), and Vercel (hosting). These providers are contractually obligated to protect your data and use it only for the services they provide to us.
• Legal requirements: When required by law, regulation, legal process, or governmental request
• Business transfers: In connection with a merger, acquisition, or sale of assets, in which case your data would be transferred to the successor entity

5. Data Storage and Security

Your data is stored on secure servers provided by our hosting and database providers. We implement industry-standard security measures including:

• Encryption of data in transit via TLS/SSL
• Encryption of sensitive data at rest
• Regular security audits and monitoring
• Access controls limiting employee access to personal data
• PCI DSS compliant payment processing through Stripe

While we take reasonable measures to protect your information, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your account data for as long as your account is active. If you cancel your subscription, we retain your data for 90 days to allow for reactivation. After 90 days, your data is permanently deleted from our systems. You may request immediate deletion of your data at any time by contacting us.

We may retain certain anonymized, aggregated data for analytics purposes, which cannot be used to identify you or your clients.

7. Cookies and Tracking

We use essential cookies to operate the Service, including session cookies for authentication. We may also use analytics cookies to understand how the Service is used. You can control cookie settings through your browser preferences, though disabling essential cookies may affect the functionality of the Service.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your personal data
• Export your data in a portable format
• Object to or restrict certain processing of your data
• Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us at chris@klowd.software. We will respond to requests within 30 days.

9. Your Clients' Data

As a subscriber, you are responsible for the client data you store in the Service. You act as the data controller for your clients' information, and we act as the data processor. You are responsible for obtaining any necessary consents from your clients for the collection and use of their data, including consent to receive email notifications.

10. Children's Privacy

The Service is not directed to children under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the Service at least 30 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the revised policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Klowd
Email: chris@klowd.software
138 E 12300 S, Ste C-1033
Draper, UT 84020