Privacy notice

1. Who handles the data

For the website, sales contacts, salon accounts and billing, the controller is Swisskauf Sagl, Via San Gottardo 47, 6500 Bellinzona, Switzerland, UID CHE-444.793.939, commercial register no. CH-501.4.027.591-2. Privacy contact: support@swissync.org.

For a salon's client data, the salon normally determines purposes and means; Swissync acts as its service provider or processor.

2. Data we process

We process only the data needed to provide, protect and improve the service. In the booking flow we record a necessary random device identifier, the IP address observed at Cloudflare’s edge, user-agent, Cloudflare Ray ID, country and ASN where available, together with account, appointment and declared contact data. When IPinfo is enabled, country, ASN, network organization and, only with an enabled Privacy service, VPN, proxy, Tor, relay or hosting indicators may supplement the technical evidence. Raw values are encrypted; salon-scoped HMAC fingerprints support correlation and blocking without exposing raw values in ordinary management views.

When a page or session opens, we use the connection country, time zone, browser language and region, UTC offset and, where configured, IP-reputation signals such as VPN, proxy, Tor, relay or hosting network. These signals propose the language, currency and regional price list and help prevent price circumvention. Decision logs do not store the IP address in plain text; it is replaced with a non-reversible HMAC fingerprint.

• Identity and contact data, protected credentials and language preferences.
• Salon, team, service, calendar and operational data.
• Payment and billing data returned by Stripe; no full card number is stored by Swissync.
• Security, log, device, consent and usage data; analytics only after consent.

3. Purposes and legal grounds

We process data to perform the contract and provide booking, accounts, support and billing; meet legal duties; prevent abuse; and, where required, with consent for analytics and marketing. Consent can be withdrawn at any time. Withdrawal does not have retroactive effect. To protect the calendar, a risk score uses only observable technical and behavioural signals such as frequency, multiple accounts from the same correlation, active bookings and prior no-shows. No sensitive categories are used, and an IP address or device does not identify a person by itself. The salon can review a block; Google, Apple and direct salon contact remain available. For bookings and subscription purchases, we compare the country observed by Cloudflare, the IP provider country and the salon or price-list country. A booking from another country is blocked. When IPinfo Privacy checks are enabled, a network identified as VPN, proxy, Tor, relay or residential proxy cannot book or buy. The salon address, price list and Stripe billing country must match; this mismatch cannot be manually overridden.

4. Providers and transfers

Depending on enabled features, selected providers may include Cloudflare, OpenAI Sites, Stripe, Google, Meta, Apple and Firebase for hosting, security, payments, communications, optional analytics and app publication. Depending on enabled features, IPinfo may be used for IP geolocation and reputation signals.

For processing outside Switzerland or the EEA, we use safeguards recognized by applicable law.

5. Retention and security

We retain data only as long as needed for its purpose, the contract, disputes and legal duties. Business and accounting records may generally be kept for up to ten years. Raw booking-security logs are normally retained for 90 days. Events preserved in a case and verified exports are normally retained for 730 days; longer only for claims, legal duties or authority requests. Regional-pricing decision events are normally retained for 90 days; the IP-reputation cache contains only HMAC fingerprints and normally expires after 6 hours.

We use salon isolation, access controls, protected secrets, revocable sessions, logs and integrity checks. No system is risk-free; incidents are handled under applicable law. Raw values are encrypted with AES-GCM; HMAC fingerprints, SHA-256 hashes, integrity seals, secondary administrative access and evidence-access logs protect the processing.

6. Your rights

You may request access, correction, deletion, restriction, objection, portability where applicable, and withdrawal of consent by writing to support@swissync.org. We may verify your identity and involve the salon responsible for the data. You may also contact the Swiss Federal Data Protection and Information Commissioner or the competent authority.

7. Updates

Material changes will be published here and, where needed, require fresh acceptance.