Privacy Policy
Chairday is an online booking service run by Doppler LLC, Las Vegas, Nevada (“Doppler”, “we”, “us”). This policy explains what personal information the Service collects, why, and what choices you have. It covers two groups of people:
- Salon staff — owners, managers and employees who use the workspace.
- Clients — people who book an appointment, join a waitlist or manage a booking on a salon's page.
Each salon decides what it offers and how it treats its clients; Doppler runs the Service on the salon's behalf. If you are a client with a question about a specific salon's practices, please contact that salon first. You can also contact us at any time (section 9).
1. What we collect and why
When you book or join a waitlist as a client
| Information | Why we need it |
|---|---|
| Name, email address and (optional) phone number | To create the appointment, send the confirmation and reminder, and let the salon reach you about your visit. |
| If you choose Continue with Google: your name and the email address Google verified | To fill in the booking form for you. We use only your name and email; anything else in Google's answer (such as a picture link or language setting) is not used or kept. No account is created, and we keep only what you then submit with the booking. |
| Service, stylist, date and time, and any note you add for the salon | To reserve the time and prepare for your appointment. |
| Your acceptance of the salon's cancellation policy (and its version) | So the salon and you both know which policy applied when you booked. |
| Your notification choice and, if offered, your marketing choice | To send only the emails you asked for. The Service itself sends no marketing. |
| Deposit status (paid, refunded, waived) and a Stripe payment reference | To show whether a deposit was paid and to let the salon refund it. Card numbers are never sent to or stored by the Service. |
| A private booking link token | So only you (and the salon) can view, move or cancel your booking. Keep the link private. |
| Network address and basic request details | To protect against abuse (rate limiting) and keep the Service working. |
When you are salon staff
- Your name, email address, role, title and optional bio and photo (for the salon page).
- A password, stored only as a salted hash; invite links are stored only as a hash.
- If you choose Continue with Google: from Google we receive your name, your email address (and that Google has verified it) and your Google account id. We keep the account id so only that Google account can sign in as you, and use the name and email as your account details. Google's answer also includes a link to your profile picture and your language setting; we don't use or keep them. We ask Google for nothing else: no contacts, calendar or files, and we keep no Google access token.
- Your working hours, time off and the actions you take in the workspace (an audit log).
When you are a salon owner
- The business details you publish: salon name, address, phone, hours, prices, policies and photos.
- If you turn on online deposits: the identifier of your salon's Stripe account and its status. The information Stripe collects to open that account (identity, bank details) goes to Stripe, not to us.
- If you subscribe: a Stripe customer and subscription reference. Your card details are held by Stripe.
2. How we use information
We use personal information only to:
- run the booking calendar and the salon workspace;
- send appointment emails (confirmations, changes, reminders, receipts, waitlist notices);
- process deposits and subscription payments through Stripe;
- keep the Service secure, prevent abuse and fix problems;
- answer support requests;
- meet legal obligations.
We do not sell personal information, do not use it for advertising, and do not use client information to train automated systems.
3. Who sees information
- The salon you book with. Its staff see the bookings and client details relevant to their work. Each salon's data is kept separate from every other salon's.
- Stripe, Inc. processes deposits (through the salon's own Stripe account) and Doppler's subscription billing. Stripe's privacy policy applies to the information it collects at checkout.
- Cloudflare, Inc. hosts the Service (application, database storage and photo storage) and protects it from attacks. Data is stored in Cloudflare's network, which includes locations in the United States.
- Our email provider delivers appointment emails on behalf of the salon.
- Google LLC, only if you choose Continue with Google. Google confirms who you are and tells us your name and email; Google's privacy policy applies on its pages.
- Authorities, when we are legally required to respond to a valid request.
We share only what each provider needs to do its job. We do not share information with anyone else.
4. Cookies
The Service uses only strictly necessary cookies: a session cookie that keeps salon staff signed in, a separate session cookie for the platform administrator, and, while someone signs in with Google, a short-lived cookie (10 to 30 minutes) that ties Google's answer to the browser that asked for it. No analytics or advertising cookies are set. Client booking pages do not set cookies, with one exception: if you choose Continue with Google, two short-lived cookies (10 minutes at most) carry Google's answer back to your booking and are removed once your details are filled in. Otherwise your private booking link is what identifies your booking.
5. How long we keep information
| Information | Kept for |
|---|---|
| Appointments, client profiles, payment and refund records | As long as the salon uses the Service; the salon can edit client details and request deletion of a client's data. |
| Queued emails | Private booking links are removed from email records as soon as the email is sent or given up. |
| Staff sessions | 8 hours of inactivity, or until sign-out. |
| Invite links | 7 days, or until used or replaced. |
| Rate-limiting counters (network address) | Up to 1 hour. |
| A salon's data after it cancels | 90 days, so the salon can export it, then deleted. |
We may keep records longer where the law requires it (for example, records of payments).
6. Your choices and rights
- Clients: you can view, move or cancel a booking through your private booking link, and turn appointment emails off from the same page. To correct or delete your information, contact the salon or email us; we will coordinate with the salon.
- Salon staff and owners: you can edit your profile in the workspace. Owners can export all of the salon's data from the workspace at any time and can ask us to delete the salon's data.
- Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, or to object to certain uses. Email hello@doppler.work and we will respond within 30 days. We will not treat you differently for exercising these rights.
7. Security
Connections to the Service are encrypted (HTTPS). Passwords and invite tokens are stored as hashes. Each salon's data lives in its own isolated database. Access to the platform is limited to Doppler's owner. No method of storage or transmission is completely secure; if we learn of a breach affecting your information, we will notify the affected salon and, where required, you and the relevant authorities.
8. Children
The Service is for businesses and their adult clients. We do not knowingly collect information from children under 13. If you believe a child has provided information through the Service, contact us and we will remove it.
9. Contact
Doppler LLC
Las Vegas, Nevada, USA
hello@doppler.work
10. Changes to this policy
We may update this policy. The current version is always at chairday.app/legal/privacy with its effective date. For material changes we will email salon owners before the change takes effect.