Privacy Policy

1. Interpretation and definitions

The following terms have meanings defined under the following conditions. The definitions shall have the same meaning regardless of whether they appear in singular or plural.

Business: Refers to Mendocino Software as the legal entity that collects Consumers’ personal information and determines the purposes and means of the processing of Consumers’ personal information, doing business in the State of California.

Company: Refers to Mendocino Software (also referred to as “the Company,” “We,” “Us,” or “Our”), operator of Salon Suite Hub.

Consumer: A natural person who is a California resident. A resident includes (1) every individual who is in the USA for other than a temporary or transitory purpose, and (2) every individual who is domiciled in the USA who is outside the USA for a temporary or transitory purpose.

Cookies: Small files that are placed on your computer, mobile device, or any other device by a website, containing the details of your browsing history on that website among its many uses.

Personal Data: Any information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a Consumer or household.

Sale: Selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a Consumer’s personal information by the business to another business or a third party for monetary or other valuable consideration.

Sharing: The disclosure of a Consumer’s personal information by the business to a third party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration, including transactions for cross-context behavioral advertising for the benefit of a business in which no money is exchanged.

2. Categories of personal information collected

Mendocino Software has collected the following categories of personal information from Consumers within the last twelve (12) months:

A. Identifiers — real name, alias, postal address, unique personal identifier, online identifier, IP address, email address, account name. Collected: Yes.

B. Personal information (Cal. Civ. Code § 1798.80(e)) — name, signature, address, telephone number, bank account number, credit card number, or other financial information. Collected: Yes.

C. Protected classifications — age (40+), race, ancestry, national origin, religion, marital status, medical condition, sex, veteran status. Collected: No.

D. Commercial information — records of products or services purchased (Free, Plus, or Premium tiers) or considered. Collected: Yes.

E. Biometric information — genetic, physiological, behavioral, and biological characteristics (fingerprints, faceprints, etc.). Collected: No.

F. Internet/network activity — interaction with our Service or advertisements, browser version, pages visited, time spent on pages. Collected: Yes.

G. Geolocation data — approximate physical location. Collected: No.

H. Sensory data — audio, electronic, visual, thermal, olfactory, or similar information. Collected: No.

I. Professional/employment — current or past job history or performance evaluations. Collected: No.

J. Non-public education info — student records, grades, transcripts, or disciplinary records. Collected: No.

K. Inferences — profile reflecting a person’s preferences, characteristics, psychological trends, or aptitudes. Collected: No.

Exclusions. Personal information does not include: publicly available information from government records; de-identified or aggregated consumer information; or information excluded from the CCPA’s scope (e.g., HIPAA-covered health data, certain sector-specific data like FCRA or GLBA).

3. Sources of personal information

We obtain the categories of personal information listed above from the following sources:

Directly from you: Information provided through forms you complete on our Service, account registration for subscription tiers, or preferences you express.

Indirectly from you: Information gathered by observing your activity and interactions while using our Service.

Automatically from you: Data collected through cookies and tracking technologies as you navigate the Service or use mobile applications.

From service providers: Information from third-party vendors, such as analytics providers or payment processors used to facilitate our services.

4. Business and commercial purposes for use

Mendocino Software uses collected personal information for the following purposes:

Service maintenance: Providing and monitoring the usage of our Service, including the Free, Plus, and Premium subscription tiers.

Account management: Managing user registrations and providing access to functionalities specific to registered users.

Contract performance: Executing and complying with purchase contracts for services and items acquired through the Service.

Communication: Contacting you via email, telephone, or SMS regarding updates, security alerts, and informative communications related to our services.

Security and auditing: Detecting security incidents and protecting against malicious, deceptive, fraudulent, or illegal activity.

Business transfers: Evaluating or conducting mergers, restructuring, or asset transfers where personal data is among the transferred assets.

5. Disclosure and sale/sharing of information

Disclosure for business purposes. We may disclose your personal information to the following categories of third parties for business purposes:

Service providers: Third-party vendors who process data on our behalf (e.g., hosting, payment processing, email delivery, and error monitoring). Our subprocessors include Supabase, Vercel, Stripe, Square, Resend, Upstash, Cloudflare (Turnstile), and Sentry (error monitoring). Our public salon directory displays a map using tiles from OpenStreetMap, whose servers receive your IP address when the map loads.

Affiliates: Our parent company or subsidiaries who are required to honor this Privacy Policy.

Business partners: Trusted partners with whom we offer specific products, services, or promotions.

Sale and sharing. The CCPA and CPRA define “Sale” and “Sharing” broadly to include transfers of data for valuable consideration or cross-context behavioral advertising. You have the right to opt out of these activities. To exercise this right, please visit “Do Not Sell or Share My Personal Information.” Mendocino Software respects your choice to opt out for at least twelve (12) months before requesting that you opt in again.

6. Tracking technologies and cookies

Mendocino Software uses cookies only to keep you signed in, to secure the Service, and to operate our private preview. Our Cookie Policy lists every cookie we set and is kept consistent with this section.

Necessary/essential cookies: These session cookies are administered by us to authenticate users, provide requested services, and prevent fraudulent use of user accounts. They are set by our authentication provider and their names begin with “sb-”.

Private-preview gate: During our invite-only preview we set a single cookie, “so_login_gate”, to remember that a visitor has passed the access gate.

Bot protection: Public forms are protected by Cloudflare Turnstile, which may set its own technical tokens to confirm that a request comes from a person rather than an automated script. It is not used to track you across sites or to serve advertising.

No advertising or analytics trackers: We do not currently run any third-party advertising, marketing, or analytics trackers, and we do not use cookies for cross-context behavioral advertising. If this changes, we will update this policy and our Cookie Policy before those technologies are deployed.

Cookie management. You can instruct your browser to refuse all cookies; however, refusing essential cookies will prevent you from signing in and using the Service.

7. California consumer rights (CCPA/CPRA)

Right to know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you. To the extent we retain your personal information for longer than 12 months, you may request access to all such information going back as far as January 1, 2022.

Right to delete: You may request the deletion of your personal data, subject to certain legal exceptions such as the need to complete a transaction, detect security incidents, or comply with legal obligations.

Right to correct: You have the right to request the correction of inaccurate personal information. Mendocino Software ensures that corrected data is not overridden by inaccurate information subsequently received from data brokers. Upon request, we will provide you with the name of the source from which we received the inaccurate information.

Right to opt out: You have the right to direct Mendocino Software not to sell or share your personal information.

Right to limit sensitive data: You have the right to limit the use and disclosure of your sensitive personal information to that which is necessary to perform the services reasonably expected by an average consumer. Mendocino Software collects sensitive data only to facilitate core service functions (e.g., payment processing for the Plus and Premium tiers). To exercise this right, please visit “Limit the Use of My Sensitive Personal Information.” Note that information for consumers under 16 is automatically treated as sensitive personal information.

Right to non-discrimination: We will not discriminate against you for exercising your privacy rights, including by denying services or charging different prices.

8. 2026 compliance updates & special provisions

Opt-out preference signals: Mendocino Software honors Global Privacy Control (GPC) signals. We provide confirmation of these requests by displaying “Opt-Out Request Honored” in your privacy settings.

Risk assessments: The Company conducts rigorous risk assessments prior to processing sensitive data or training automated decision-making technologies. These assessments identify: (1) the business purpose of the activity; (2) the personal information and operational elements involved; (3) the activity’s potential benefits and negative impacts; and (4) the safeguards implemented to address those impacts.

Health data rights: If a request to correct health information is denied, Consumers may submit a 250-word statement contesting the accuracy, which we will provide to any party to whom the information was disclosed.

Youth data: We do not sell or share information of consumers under 16 without affirmative authorization (opt-in).

9. Subscription and automatic renewals (AB 2863)

Pursuant to California Assembly Bill 2863:

Affirmative consent: Express affirmative consent is required before enrolling a Consumer in the Plus or Premium subscription tiers. Plus is $20/month or $200/year; Premium is $49/month or $490/year. A Free ($0) tier is also available.

Cancellation: We provide a “matching channel” cancellation method. If you signed up online, you may cancel online.

Reminders: We provide annual reminders stating the renewal frequency, the amount to be charged, and clear instructions for cancellation. We retain verification of your affirmative consent for at least three years or one year following contract termination, whichever is longer.

10. Accessibility and contact information

Accessibility: Mendocino Software is committed to digital accessibility. Our website aims to meet Web Content Accessibility Guidelines (WCAG) 2.1 Level A and AA standards to ensure content is perceivable, operable, understandable, and robust.

Contact information: To exercise your rights, please contact us using at least two of the following methods.

Method 1 — Interactive web form: https://salonsuitehub.com/contact.

Method 2 — Additional contact channels: Contact email Jason@MendocinoSoftware.com; Company address Mendocino Software, P.O. Box 2141, Fort Bragg, CA 95437.