Privacy Policy

Last updated: October 8, 2026

Inchair Software LLC (“Inchair,” “we,” “us,” or “our”) makes online booking and client-communication tools that salons, barbershops, nail studios, spas, tattoo studios and independent professionals (“businesses”) use to run their appointment books. This policy explains how we collect, use, share, protect and delete information when you use our website, the businesses’ booking pages, the business dashboard, and the Inchair mobile app (together, the “Service”), including when you opt in to receive text messages (SMS) about an appointment.

When you book with a business on Inchair, that business is the one you’re scheduling with. Inchair is the platform that runs the booking page, sends the confirmations and reminders on the business’s behalf, and stores the information described below. The Inchair mobile app is for the people who work at those businesses, and this policy covers it the same way it covers the dashboard. By using the Service, you agree to this Privacy Policy. If you don’t agree, please don’t use the Service.

1. Information we collect

• Contact information: name, email address, phone number, and mailing address.
• Account information: login credentials and communication preferences. Passwords are stored only in a form that can’t be read back. If you sign in with a passkey, we keep only its public key.
• Booking information: appointment details, service history, and the team member you prefer.
• Client records a business keeps: the notes, color formulas, preferences, birthday, pronouns, allergies, and patch-test and consultation records a business adds to a client’s record. Allergy and patch-test details can relate to health, so they’re shown only to that business’s team.
• Messages: messages and attachments sent between a business and its clients through the Service.
• Photos and files: profile photos of team members, which clients see when they book; photos a business takes of a client, which only that business’s team can see unless the business shares one with that client; and files attached to messages or imported by a business.
• Payment information: billing details processed through our payment processor (Stripe). We don’t store full card or bank account numbers.
• Information from the mobile app:
  • A notification token for each phone you sign in on, so we can notify you about your work, such as new bookings and messages. It’s removed when you sign out.
  • Location, only while taking a contactless (tap to pay) payment on Android. Stripe’s payment software uses the phone’s precise location, which Stripe requires for in-person payments. Inchair doesn’t receive or store it.
  • The camera and photo library, only when you choose to take or pick a photo, such as a profile photo or a business logo.
• Device and usage information: IP address, browser type, device identifiers, and how you interact with the Service. Visits to a business’s booking page are counted as daily totals with no cookie or identifier, so the business can see how many people visit.
• Session recordings on Inchair’s own website: on our marketing, help and legal pages and the business sign-up form, we use Microsoft Clarity to record how visitors scroll, click and move through the page, so we can see where it’s confusing. Clarity and Microsoft collect this through first- and third-party cookies and similar technologies, along with device and browser details. What you type into form fields is masked and never recorded. We don’t use it on the business dashboard, in the mobile app, or on any business’s booking pages. Microsoft’s handling of this data is described in the Microsoft Privacy Statement.
• SMS opt-in information: your mobile number and consent status when you opt in to text messages from a business using Inchair.

2. How we use your information

We use the information we collect to:

• Create and manage your account
• Schedule, confirm, and remind you of appointments
• Process payments and transactions
• Respond to inquiries and provide support
• Send you service-related communications, including by SMS (only if you’ve opted in)
• Send notifications to the mobile app for the people who work at a business
• Improve, secure, and maintain the Service
• Comply with legal obligations

3. SMS / Text Messaging Communications

If you opt in to receive text messages from a salon on Inchair, the following applies:

• Consent: by providing your mobile number and opting in, you consent to recurring automated text messages — such as appointment reminders and other account-related messages — at the number provided. Consent is not a condition of booking an appointment or purchasing any service.
• Message frequency: message frequency varies based on your appointment activity. Today that’s typically one reminder text per booked appointment; it may change as we add message types, in which case this policy will be updated.
• Message and data rates: message and data rates may apply, depending on your mobile carrier and plan.
• Opt-out: you can opt out at any time by replying STOP to any text. Every salon on Inchair sends from the same shared number, so a STOP applies to that number as a whole — it ends appointment texts from every salon on Inchair you may have messages with, not just the one you were just texted by. You’ll get a one-time confirmation that you’ve been unsubscribed. You can opt back in at any time from your account, or by replying START.
• Help: reply HELP to any text for assistance, or contact us at hello@inchair.app.
• Mobile information isn’t shared for marketing: no mobile number or opt-in status collected as part of SMS consent is shared with any third party or affiliate for their own marketing or promotional purposes. This is excluded from any general data-sharing described in Section 4. Text-messaging originator opt-in data and consent are never shared with third parties.
• Carriers: carriers aren’t liable for delayed or undelivered messages, and delivery is subject to your network provider.

4. How we share information

Other than as described in Section 3 above regarding SMS opt-in data, we may share information with:

• Service providers: companies that run parts of the Service for us, bound by confidentiality obligations. These include payment processing (Stripe), hosting and databases, email delivery, text message delivery, mobile app notifications (Expo and Google Firebase), address search (Google Maps), and website analytics (Microsoft Clarity and Vercel).
• The business you book with or work at: to set up and manage appointments. A business’s team can see the records it keeps about its clients.
• Legal compliance: when required by applicable law, regulation, legal process, or governmental request.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to standard confidentiality protections.

We do not sell your personal information.

5. Data security

We use reasonable administrative, technical, and physical safeguards designed to protect your information from unauthorized access, use, or disclosure. Information travels over encrypted connections. Client photos and message attachments are kept in private storage and shown only to people signed in with access to them. The mobile app keeps its sign-in in the phone’s secure storage. No method of transmission or storage is completely secure, and we can’t guarantee absolute security.

6. Data retention and deletion

We keep personal information for as long as the account it belongs to is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You can ask us to delete your account, or just some of your information, at any time: see how to delete your account, or email hello@inchair.app. You can also:

• Clients: delete your account from your account page on the business’s booking site, once you have no upcoming appointments. This removes your name, email, phone number, birthday, pronouns, allergies and preferences, turns off your login, removes your saved payment methods from Stripe, and deletes photos the business took of you. The business keeps its record of your past visits and payments as business records. To have those removed too, ask the business or email us.
• Team members: the business owner can remove you from the team, which deletes your login and the phones registered for notifications. Your name stays on the business’s past appointments. Signing out of the mobile app removes that phone’s notification token.
• Businesses: when a business’s account closes, we keep its data available for a reasonable period so it can be exported, then delete it, as described in the Merchant Agreement.

Some records are kept after deletion for as long as the law requires, such as payment and transaction records we or Stripe must keep for tax, fraud prevention and disputes. Copies in our backups are removed as those backups expire.

7. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, or restrict the use of your personal information, and you can opt out of SMS communications at any time as described in Section 3. To exercise any of these rights, contact us using the information in Section 10.

8. Children’s privacy

The Service isn’t directed to individuals under the age of 16, and we don’t knowingly collect personal information from children.

9. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised “Last updated” date. When a change affects your information, people who sign in to the dashboard or the mobile app are shown a summary and asked to agree. Continuing to use the Service after a change is posted means you accept the revised policy.

10. Contact us

Questions about this Privacy Policy or our data practices?
Inchair Software LLC
hello@inchair.app
inchair.app