Privacy policy

About this policy

Shearloft helps salon professionals manage clients, appointments and payment records. This policy covers shearloft.com, app.shearloft.com and the Shearloft iOS app, including beta versions distributed through TestFlight.

Shearloft is operated by Josh Clark, based in Florida, United States. “We” and “our” refer to that operator. A salon using Shearloft chooses the client information it enters and how it uses that information in its business. Contact your salon about its own services, records and communications.

Information we handle

• Account and salon information: names, email addresses, account identifiers and access roles; salon name, contact details, address, timezone and settings. Information comes from account holders and authorized salon users.
• Client records: names, phone numbers, email addresses, optional pronouns and birthdays, notification preferences, visit history, service preferences, formulas, notes and alerts entered by salon users. Free-text notes may include sensitivities or other personal details the salon chooses to record.
• Appointments and business records: service details, dates, times, status, internal notes, waitlist entries and related client identifiers. Payment records include amounts, dates, cash/check/Venmo method labels, notes and correction history. Recording a payment in Shearloft does not process a card payment or move money through Venmo. Do not put card or bank account numbers in notes.
• Sign-in and service records: session information, sign-in verification records, request/network information used for access security and abuse prevention, and email delivery records. Web session records can include IP addresses and browser information. Delivery records can include recipient addresses, message contents, delivery status and provider identifiers.
• Beta feedback: Apple collects and shares TestFlight crash logs and usage information with the app provider. Feedback you submit can include comments and screenshots; tester identity may be included depending on how you joined. See Apple’s TestFlight privacy information.

The iOS sample salon uses fictional clients, appointments and payment records in memory. Exploring that sample does not require an account or load live salon records. Apple’s TestFlight data practices still apply when you use a TestFlight build.

How information is used and shared

Shearloft uses account and salon information to authenticate users and provide access to the appropriate workspace. Client and business records support salon recordkeeping, scheduling, payment tracking and reports. Sign-in and delivery records support access controls, abuse prevention and email delivery.

Authorized salon users can access records according to their permissions. Cloudflare hosts the service through Workers and stores application records in D1. Resend processes recipient addresses and email contents to deliver sign-in messages and, where enabled, appointment confirmations, changes, cancellations and reminders. Appointment emails can contain client names, service details, appointment times and salon contact details.

If you export client records or subscribe to a calendar feed, information is copied to the destination you choose. Keep exported files and private calendar links secure. Your calendar or messaging provider handles information under its own terms. Where the iOS text-message action is available, it opens the device’s message composer with the selected recipient and draft for you to review and send.

We use salon information and beta feedback to run and support Shearloft. Support communications are used to answer questions, investigate issues and handle requests. We may disclose information when required by applicable law or to address security incidents. Our hosting and email providers process information to provide their services under their applicable terms and data protection agreements.

Cookies and device storage

The website uses sign-in cookies and local browser storage for preferences such as appearance and calendar view. Its service worker caches an offline screen and icon; it does not provide an offline copy of live client, appointment or payment records.

The connected iOS app stores sign-in credentials and pending sign-in proof using iOS secure storage backed by Keychain. An installation marker helps prevent reuse of credentials from an earlier installation. Signing out and removing the app are different from deleting server-side salon records.

You can clear website storage in your browser settings. Doing so may sign you out or reset preferences. You can stop using the connected app or use the fictional sample salon without signing in.

Your choices and deletion

Salon users can correct client details through the available editing controls. A salon can turn off a client’s appointment email notifications. Clients should contact their salon to change their details or communication preferences. Account security messages are separate from appointment notifications.

Archiving a client hides the client from the active directory and preserves their history. Removing a payment record is reversible and preserves a correction record. These actions do not erase all personal information. Signing out revokes or clears sign-in access as supported by the app; it does not delete your account or salon records.

To request access, correction or deletion of your personal information or account, or to ask about withdrawing permission for a use of your information, email admin@shearloft.com. We review requests and may need to verify your identity, authority and the relevant salon. We explain the action we can take, any information that must be retained and the status of unresolved work. Where a salon controls the records, we coordinate the request with that salon as appropriate. Your rights and any required response timing depend on applicable law. Emailing a request does not automatically erase records.

Retention and security

Archived client records and reversible payment changes remain stored. Expiration of a sign-in code or session ends its validity; it does not establish a deletion deadline for every related server record.

Account and salon records are stored to provide the service and preserve the salon’s working history. Email contents and delivery records support delivery and troubleshooting; security and audit records support access protection and investigation. Support and beta feedback help resolve issues. These records do not all have an automatic deletion schedule. When reviewing a deletion request, we consider the information’s purpose, the relevant salon’s authority, security needs and applicable legal preservation requirements. Deletion of active records is separate from expiration of provider backups and removal of copies in email, exports, calendars or Apple’s systems. We explain any such limits that apply to a request; we do not treat archiving or revoking access as complete erasure.

The service uses HTTPS, authenticated access controls and restricted workspace access. The iOS app uses Keychain-backed storage for sign-in secrets. No method of storage or transmission can guarantee absolute security.

Contact and changes

Privacy contact: admin@shearloft.com (Josh Clark, Florida, United States). Do not send passwords, sign-in codes or unnecessary client information with a privacy request.

Updates to this policy will appear on this page with an updated effective date.