Payment & Security

Document identification

Company: Mendocino Software. Effective date: August 22, 2026. Contact: Jason@MendocinoSoftware.com.

These protocols govern the Free, Plus, and Premium service tiers of Salon Suite Hub and are intended to support regulatory compliance and data integrity for our B2B subscription services.

Transaction security & encryption

All traffic between your browser and Salon Suite Hub is encrypted in transit using TLS, with HSTS enforced so connections cannot be downgraded. This keeps sensitive business data, credentials, and transaction metadata shielded from interception.

Encryption is applied at the transport layer to secure all traffic between the end user and our servers, and data is encrypted at rest by our database provider (Supabase).

Payment handling & PCI

Card data is handled entirely by our payment partners: Stripe processes subscription billing, and Square handles our optional point-of-sale import. Certified processors like these support major brands, including Visa, Mastercard, American Express, and Discover.

Salon Suite Hub does not store, collect, or process raw payment card numbers on its own servers. Because card data never touches our systems, we remain in PCI DSS SAQ-A scope.

Fraud protection & monitoring

We perform risk assessments before processing sensitive data or deploying automated tools used for fraud detection, in alignment with 2026 updates to California privacy regulations.

We use monitoring tools to identify malicious, deceptive, or unauthorized activity, including unauthorized access attempts, and to protect the integrity of our transaction logs. Sensitive actions are rate-limited and bot-protected.

Mendocino Software maintains a policy of pursuing individuals or entities responsible for fraudulent activity to the fullest extent permitted by law.

Subscription billing & automatic renewal

For our paid Plus and Premium tiers, we comply with California Assembly Bill 2863 on subscription transparency.

We obtain clear, affirmative consent before charging for any subscription, including free-to-paid conversions, promotional trials, or the start of regular billing cycles.

Subscribers receive an annual notification detailing the renewal frequency, the amount to be charged, and clear cancellation instructions. We provide a “matching cancellation” method, so a subscription started through our online portal can be cancelled through the same portal.

Verification of consumer consent is retained for at least three years, or one year after contract termination, whichever is longer, and remains audit-ready regardless of interface changes.

Data privacy & consumer rights (CCPA/CPRA)

Under the California Consumer Privacy Act, as amended by the CPRA, California residents and business contacts may opt out of the selling or sharing of their personal information through a clear, conspicuous link.

Users may request access to personal information we have collected, request correction of inaccurate data (which we take measures to keep from being overridden by third-party data brokers), and limit the use of sensitive personal information beyond basic service delivery.

Users may request deletion of their data, subject to legal and transactional exceptions necessary to fulfil business contracts.

Tenant isolation

Every salon’s data is isolated with row-level security, so one tenant can never read or write another tenant’s records. This isolation is verified with automated cross-tenant tests.

Accessibility standards

We strive to meet the Web Content Accessibility Guidelines (WCAG) 2.1 at Levels A and AA so that our B2B clients, including public entities with their own accessibility obligations, can use Salon Suite Hub to serve the public.

Contact & dispute resolution

Business address: Mendocino Software, P.O. Box 2141, Fort Bragg, CA 95437. Security or billing disputes should first be submitted to Jason@MendocinoSoftware.com.

To help us route your request, please use the subject line “Account Security Issues” for suspected breaches or unauthorized access, and “Termination Request” for subscription cancellations. If a complaint remains unresolved, you may contact the California Department of Consumer Affairs. Our website is available at https://salonsuitehub.com.