Privacy policy

Salon Capture · Divergence IP LLC · last updated November 9, 2026

DRAFT for review by Divergence IP LLC. Not final wording.

This policy explains what Salon Capture (the app at saloncapture.com) collects, why, where it is kept and how to have it removed. Salon Capture is run by Divergence IP LLC for the nail salons it works with ("the salon").

Google account data

The app asks Google for two kinds of access:

• Your email address (Google scopes openid and email), when someone signs in to the admin pages. It is used only to check that the person is an allowed administrator.
• Google Drive access (scope https://www.googleapis.com/auth/drive), when a salon connects its own Google account. Google's screen describes this permission broadly. The app uses it only to:
  • create photo and video files, and folders for photo sets, inside the salon folders the salon has set up;
  • find those folders by their ID or name, and find files the app itself created (so a retried upload is not saved twice);
  • check that the configured folders exist.
  The app does not open, read, download, copy or delete any other files in the salon's Drive.

Salon Capture's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google data is not used for advertising, is not sold, and is not used to train AI models.

Photos and videos

• Photos and videos a technician sends go to the salon's own Google Drive. The salon controls them there.
• On the way, they pass through the app's server in memory and are not kept on it.
• Before sending, the phone converts each photo to a JPEG, which removes its hidden details (such as the location where it was taken). Videos are sent as recorded, so a video may still contain such details if the phone added them.
• Until a photo or video has been sent, it waits on the technician's phone, in the app's own storage. It is deleted from the phone once it has arrived. The phone keeps a small preview of sent items for 7 days.

What the app stores

The app's database is on a private, encrypted disk at our hosting provider, Fly.io, in its Ashburn, Virginia (USA) region. It holds:

• for each salon: its name, the email of the Google account connected for Drive, the IDs of its Drive folders, and the Google sign-in key ("refresh token") that lets the app save into its Drive. That key is encrypted, and the encryption key is kept separately from the database;
• for each technician: her name as the salon entered it, the start of her file names, and her language;
• for each personal link: a scrambled fingerprint of the link (not the link itself), a label, and when it was made, last used or turned off;
• for each send: which technician sent it, when, what kind it was, the file or folder name, its size, and the Drive file IDs (the support log);
• for admin sign-ins: the admin's email and a scrambled session fingerprint, for 14 days.

Fly.io keeps encrypted daily backups of the disk for 5 days. Fly.io may also keep short-lived technical logs of requests, as described in its own privacy policy.

Sharing

We do not sell any data or use it for advertising. Data is shared only with the services that run the app: Google (to save into the salon's Drive) and Fly.io (hosting). It may be disclosed if the law requires it.

Keeping and deleting data

• A salon can remove the app's access to its Drive at any time at myaccount.google.com/permissions, or ask us to disconnect it.
• The salon can turn off any technician's link at once.
• To have your data deleted, email hello@saloncapture.com. We will delete it and confirm by email.
• Photos and videos already saved in the salon's Drive belong to the salon and are deleted there.

Children

Salon Capture is for salon staff. It is not meant for children under 13.

Changes and contact

If this policy changes, the new version will be posted here with a new date. Questions: Divergence IP LLC, hello@saloncapture.com.