This Privacy Policy explains how AviaTravel OÜ (“SaltyCut”, “we”, “us”) collects, uses and protects personal data when you use saltycut.com, our salon dashboards, public booking pages and related services (the “Service”).
1. Who we are
SaltyCut is a multi-tenant booking platform for salons, barbershops, spas and nail studios. We act as a data controller for platform accounts (salon owners and team logins) and marketing site visitors, and as a data processor for client data that salons store when they run bookings (names, phones, appointment history).
Privacy contact: [email protected] · Tornimäe tn 5, Kesklinna linnaosa, 10145, Tallinn, Estonia
2. Data we collect
- Account data — name, email, phone, salon name, password hash, plan and billing status.
- Billing data — invoices, subscription status, payment provider references (card details are handled by Stripe/Revolut; we do not store full card numbers).
- Salon operational data — services, staff, clients, appointments, shop orders, reviews and settings you enter.
- Usage & technical data — IP address, browser type, device, pages viewed, short-link visits, cookies/session IDs, and logs needed for security and debugging.
- Marketing — if you join a waitlist or newsletter, your email and preferences.
3. How we use data
- Provide, secure and improve the Service.
- Create and manage salon accounts, roles and bookings.
- Process subscriptions, invoices and support requests.
- Send transactional emails (confirmations, reminders, billing).
- Detect abuse, prevent fraud and meet legal obligations.
- With consent or legitimate interest, send product updates (you can unsubscribe).
4. Legal bases (GDPR)
Where GDPR applies, we rely on: contract (to run your account), legitimate interests (security, product improvement), legal obligation (tax/accounting), and consent where required (optional marketing cookies/emails).
5. Sharing
We share data only with processors who help us run SaltyCut, such as:
- Hosting and infrastructure providers
- Payment providers (e.g. Stripe, Revolut)
- Email delivery providers
- Analytics or error monitoring if enabled
We do not sell personal data. Salons control their own client lists; we do not use salon client data for our own marketing.
6. International transfers
Your data may be processed in the EU/EEA or other countries where our providers operate. When data leaves the EEA we use appropriate safeguards (e.g. Standard Contractual Clauses) where required.
7. Retention
We keep account and billing records for as long as your salon is active and for a reasonable period afterward for legal, tax and dispute purposes. Salon owners may delete clients and content from their dashboard; residual backups may persist for a limited time.
8. Your rights
Depending on your location you may request access, correction, deletion, restriction, portability or object to certain processing. Contact us at the email above. You may also lodge a complaint with your local data protection authority.
9. Cookies
We use essential cookies for login/session security. Preferential cookies (language) may be stored. Non-essential analytics cookies are only used if enabled and disclosed.
10. Children
The Service is for businesses. It is not directed at children under 16.
11. Changes
We may update this policy. The “Last updated” date at the top will change. Material changes may also be announced in the product or by email.