Privacy Policy

1. Introduction & Scope

Welcome to CutBook POS (referred to as "CutBook", "we", "us", or "our"). We value your privacy and are committed to protecting the personal and operational data of your salon, stylists, and clients. This Privacy Policy explains how we collect, use, disclose, and secure your information when you utilize the CutBook mobile application (Android/iOS), our web application, and our website (collectively, the "Service").

By accessing or using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with these terms, please do not access or use the Service.

2. Information We Collect

To provide a fully functioning POS and salon analytics experience, we collect several categories of information depending on how you interact with our Service:

A. Personal Data

When you create an account, register your salon, or communicate with us, we collect information that can identify you, including:

• Authentication Details: Email address and phone number (collected and processed securely via Google Firebase Authentication).
• Profile Information: Display name and profile picture (optional, for personalizing your account).
• Business Details: Salon name, business address (optional), local currency, and timezone settings.

B. Transactional & Salon Operational Data (Offline-First Sync)

CutBook is built on an offline-first architecture. All transaction logs, commission structures, and stylist profiles are stored locally in a secure SQLite database on your device. When an active internet connection is detected, CutBook automatically synchronizes your local data with our secure cloud database (Google Cloud Firestore) to facilitate backups and support multi-device access. This synchronized data includes:

• Stylist & Employee Profiles: Names, roles, custom commission percentages, and payout histories.
• Work Entries & Service Logs: Details of services rendered (e.g., haircuts, styling, coloring), service price tags, timestamps, client display names (optional), and payment methods.
• Financial Metrics: Commission calculations, tips collected, sales performance indicators, and historical checkout logs.

C. Device & Technical Data

We automatically collect certain technical information from your device when you access our app or website:

• Device Identifiers: Device model, operating system name and version, and unique device IDs.
• Push Notification Tokens: Unique tokens required to deliver synchronization updates, reminders, and system alerts.
• Usage & Diagnostic Data: IP address, access dates/times, app performance metrics, and error logs (collected via Sentry and Google Firebase Crashlytics).

3. How We Use Your Information

We process and use the collected data strictly for operational business purposes, including:

• Core App Functionality: Creating and managing accounts, running offline databases, and synchronizing data across multiple devices.
• Business Operations: Calculating accurate stylist commissions, tracking client appointments, and providing real-time financial reporting.
• Customer Support: Diagnosing synchronization errors, troubleshooting crash logs, and responding to support requests.
• Communications: Sending push notifications regarding sync status, business updates, and security announcements.

We do not sell, trade, rent, or distribute your salon data, client records, or operational logs to third-party advertising companies or data brokers.

4. Data Security

We implement industry-standard physical, technical, and administrative security measures to protect your data:

• Data in Transit: All communications between your local device and our synchronization backend are encrypted using secure Transport Layer Security (TLS/HTTPS) protocols.
• Data at Rest: Customer data synchronized to Cloud Firestore is encrypted using enterprise-grade server-side encryption. Local databases rely on standard operating system sandboxing.
• Access Control: Access to cloud databases is restricted strictly through Firebase Security Rules, ensuring users can only read and write data associated with their verified organization ID.

5. Data Retention & Account Deletion

In accordance with Google Play Store and Apple App Store Developer Policies, we provide users with full control over their data, including the right to delete their accounts and operational records.

Retention Period: We retain your personal and operational data only for as long as your account is active, or as necessary to provide you with the Service, comply with legal obligations, or resolve disputes.

Account and Data Deletion Flow: You can initiate a permanent deletion of your account and all associated operational data at any time:

• In-App Deletion: Navigate to Settings > Account Settings > Delete Account inside the CutBook application. Confirming this action will trigger an automatic cleanup script.
• Manual Deletion Request: You can request account deletion by emailing our support team at bdcutbook@gmail.com or jaoharraihan@gmail.com. Please provide your registered email address or organization ID.

Scope of Deletion: Upon processing your deletion request, your authenticated credentials will be deleted from Firebase Authentication, and all synchronized stylist profiles, transaction histories, service logs, and analytics associated with your salon will be permanently purged from Cloud Firestore within 30 days. Any local SQLite database files will remain on your device until you manually uninstall the app.

6. Third-Party Services & SDKs

We use standard Software Development Kits (SDKs) and integration partners strictly to maintain, improve, and secure the Service. These third parties handle your data in accordance with their respective privacy policies:

• Google Firebase (Auth, Firestore, Analytics, Crashlytics): Used for cloud synchronization, user authentication, general app usage metrics, and crash reporting. Firebase Privacy Policy
• Sentry: Used to monitor application performance and catch crashes in real-time. Sentry Privacy Policy
• Stripe / bKash: Used to process subscription payments and premium invoices. We do not collect or store credit card numbers on our servers. Stripe Privacy Policy | bKash Privacy Policy

7. Children's Privacy

Our Service is not intended for or directed to children under the age of 13. We do not knowingly collect personal identifiable information from children under 13. If we discover that a child under 13 has provided us with personal data, we immediately delete this from our servers.

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time to reflect changes in our practices or regulatory requirements. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this page periodically.

9. Contact Information

If you have any questions, comments, or concerns about this Privacy Policy, or if you need assistance with account deletion or data portability, please contact us at:

Email: bdcutbook@gmail.com / jaoharraihan@gmail.com

Phone: +880 1874-517426

Mailing Address: CutBook Project Team