Privacy Policy
Cale Boutique respects the privacy of clients, staff, and website visitors. This policy explains what information our web application collects, why we use it, how it is protected, and the choices available to you.
1. Who we are
Cale Boutique operates a beauty-service and salon-management platform for appointments, walk-in queues, client care, rewards, staff operations, job orders, point-of-sale records, inventory, and related business functions.
Privacy questions or account-data requests may be sent to [email protected].
2. Information we collect
Google account information
When you choose Sign in with Google, we request only the basic identity information needed to create and recognize your account: your Google account identifier, name, email address, and profile image when available.
Booking and client information
We may collect contact details, selected services, preferred staff member, appointment date and time, booking status, visit history, loyalty activity, care-plan progress, and other information you choose to provide while using Cale Boutique.
Operational salon information
For staff and administrators, the system may process attendance records, work schedules, transaction records, commissions, inventory movements, job-order information, and evidence images captured for approved operational workflows. Location data and camera access are requested only when a feature requires them and after the device asks for permission.
Push notifications
If you enable notifications, we store a browser push-subscription endpoint and cryptographic subscription keys so appointment confirmations, queue updates, reminders, and other permitted notifications can be delivered to that device.
3. Google Calendar access
Normal customer sign-in does not require Google Calendar access. Calendar permission is requested separately only when an authorized staff member or administrator deliberately chooses to connect Google Calendar.
When Calendar is connected, Cale Boutique may use the authorized Google Calendar scopes to read free/busy availability and to create, update, or cancel calendar-event copies related to salon appointments. Supabase appointment records remain the application source of truth.
Google Calendar information is not used for advertising, sold to third parties, or used to build advertising profiles.
4. How we use information
- authenticate accounts and apply role-based access;
- process appointment and walk-in requests;
- send operational notifications and reminders;
- maintain visit history, loyalty, aftercare, and service records;
- support staff attendance, job orders, POS, inventory, earnings, and audit trails;
- protect the service against fraud, misuse, and unauthorized access;
- diagnose failures and improve system reliability.
5. Service providers and disclosures
We use infrastructure and service providers only as needed to operate the application. These may include Supabase for authentication, database and storage services; Cloudflare for website delivery and security; Google for authentication and, when separately authorized, Calendar; and browser or platform push-notification services. Information may also be disclosed when required by applicable law or to protect users and the business from fraud or security threats.
We do not sell personal information.
6. Google API Services User Data Policy
Cale Boutique's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
7. Data retention
We keep account and operational records only for legitimate business, safety, accounting, dispute-resolution, audit, and legal purposes. Different record types may have different retention periods. Where the system supports archival or deactivation, records may be retained in an auditable state instead of being silently overwritten.
Push subscriptions that are expired or no longer usable may be deactivated. Connected Google credentials may be revoked by disconnecting the integration or by removing Cale Boutique access from your Google Account.
8. Security
We use role-based authorization, database row-level security, private storage for protected operational evidence, HTTPS, server-side handling of privileged credentials, and audit mechanisms designed to reduce unauthorized access. No online system can guarantee absolute security, but privileged keys and Google client secrets are not intentionally exposed in browser code.
9. Your choices and rights
You may decline optional browser permissions such as notifications, camera, or location, although features that depend on those permissions may not work. You may sign out at any time, revoke Google permissions from your Google Account, and contact us to request reasonable access, correction, or deletion of personal information subject to records we must retain for legitimate or legal purposes.
10. Children's privacy
Cale Boutique is not designed to knowingly collect Google account information from children in violation of applicable platform or legal requirements. A parent or guardian who believes a child's information was submitted improperly may contact us for review.
11. Changes to this policy
We may update this policy as the application, service providers, or legal requirements change. The effective date shown above will be updated when material changes are published.
12. Contact
For privacy questions, Google-data questions, or requests concerning your account, contact [email protected].