Privacy policy

Who this policy covers

SuiteCue is software for salon suite buildings. Three kinds of people use it: building owners and operators, the professionals (“pros”) who rent suites, and the clients who book with those pros. This policy covers all of them, and anyone who visits suitecue.com or gets a text or email from us.

SuiteCue plays two roles. For our own website, accounts, and billing, SuiteCue decides how personal information is used. For the client lists, appointments, and notes that a pro keeps in SuiteCue, the pro decides how that information is used and SuiteCue handles it for the pro as a service provider. In the same way, the building owner decides how lease, rent, and door access records for their location are used.

If you are a client and want to see or delete your information, write to us at privacy@suitecue.com. We will handle the request or pass it to the pro or building that controls the information.

What we collect

Owners and operators

• Your name, email address, and phone number.
• Your business’s legal name and billing address, and a tax ID if you choose to enter one. Tax IDs are stored encrypted.
• The locations, suites, leases, rent schedules, fee rules, and tenant records you set up, and the rent payment status of each tenant.
• The names and contact details of team members you invite.
• Payment methods are entered into Stripe. We keep Stripe identifiers, the card brand, and the last four digits.

Pros

• Your name, email address, and mobile number.
• Your booking page and profile: photo, bio, services, prices, hours, and policies.
• Your clients, appointments, notes, messages, and the intake forms and waivers you use.
• Identity and bank details that Stripe collects so you can be paid. Stripe holds them, not SuiteCue.
• Your rent invoices and payment history, and a calendar connection if you choose to connect one.

Clients

• Your name and mobile phone number, and your email address if you give one.
• The appointments you book: the pro, the services, the time, and the building.
• Answers to intake forms and waivers, and notes your pro adds.
• When and where you agreed to receive text messages.
• The door pass issued for your visit and when it was used.
• Payment details are entered into Stripe. We keep the card brand, the last four digits, and receipts.

Everyone

• Device and usage information such as browser type, pages visited, approximate location from your IP address, and timestamps.
• Anything you send to us, such as support emails.

Phone numbers and texts

We use your mobile number to confirm it is you with a one-time code, to send booking confirmations, reminders, and door passes, and, for pros and owners, to send rent notices and account alerts. When you agree to receive texts, we record when and where you agreed. You can stop texts at any time by replying STOP. The SMS terms explain the program in full.

We do not sell phone numbers. No mobile information is shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are not shared with any third parties. We share a phone number only with your pro and the building where you booked, and with the service providers listed below that deliver messages and run the service.

Door passes and entry events

A door pass lets a client into a building during an appointment. To create one, we send the building’s access system the appointment window, the doors the client may open, and the client’s name or phone number if that system needs it. We record when a pass was created, viewed, used, and revoked, and the entry events the door system reports, such as which door opened and when.

Your pro and the owner and managers of the building can see these records for their own location. PINs, QR codes, and pass links are encrypted or hashed, and are never written to our logs. A pass link belongs to one appointment and stops working when the appointment window ends. We do not run analytics on door pass pages.

How we use information

• To run SuiteCue: bookings, calendars, door passes, rent, payments, and support.
• To send the texts and emails described in this policy.
• To keep the service secure, and to prevent fraud and abuse.
• To understand how the product is used and to improve it, using analytics you can turn off.
• To meet legal, tax, and accounting obligations.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

Who we share it with

We share information with the pro and the building you do business with, as described above. We also use service providers that process information for us under agreements that limit what they can do with it:

Stripe

Card and bank payments, pro payouts, rent collection, and identity checks for payouts.

Telnyx

Sending and receiving text messages.

Resend

Sending email.

PostHog

Product analytics on our website and apps. See the cookie policy to opt out.

Railway

Hosting for our application and database.

Cloudflare

DNS, network security, and file storage.

Sentry

Error monitoring, which can include technical details such as your browser and the page where an error happened.

Your building’s access-control provider

The door system the building uses, so it can create and revoke your time-limited credential.

Google

Only if you choose to sign in with Google or connect a Google calendar.

We may also disclose information when the law requires it, to protect people or the service from harm, or as part of a merger, sale, or financing, in which case the new owner must honor this policy.

How long we keep it

• Account and business records are kept while your account is active, and afterward as needed for legal, tax, accounting, and dispute purposes.
• Door entry event records are kept as configured by your building.
• How long an appointment management link stays valid after the appointment is as configured by your building.
• Message records are kept with PINs, QR codes, and pass links removed.
• When we no longer need information, we delete it or remove what identifies you.

Your rights and choices

You can ask us to:

• Tell you what personal information we hold about you, and give you a copy.
• Correct information that is wrong.
• Delete your information, subject to records we must keep by law.
• Stop using your information for a purpose you object to.

You can also reply STOP to end text messages, turn off analytics on the cookie page, and close your account from your account settings. Depending on where you live, including New Jersey and California, you may have additional rights under state law, including the right to appeal a decision about a request. We will not treat you worse for using these rights.

To make a request, email privacy@suitecue.com. We may need to confirm it is really you. We will respond within the time that applicable law requires. If your information is controlled by a pro or a building, we may forward your request to them.

Security

We use encryption in transit and at rest for sensitive values, and we limit who can see what by role and by location. No system is perfectly secure. Read more on our security page.

Children

SuiteCue is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us information, contact us and we will delete it.

Changes to this policy

We will post any changes here and update the date at the top. If a change is significant, we will also tell account holders by email or in the app.

Contact us

Questions about this policy or your information: privacy@suitecue.com.