Privacy Policy

1. Information We Collect

We may collect the following categories of information.

Account and Business Information

When a hair professional creates or manages a Root & Foil account, we may collect information such as:

• Name
• Email address
• Phone number
• Business or professional name
• Business settings and preferences
• Account credentials and authentication information
• Subscription and billing-related information
• Booking preferences and availability

Payment card information used to purchase a Root & Foil subscription may be processed directly by a third-party payment processor. Root & Foil may receive limited billing information, such as payment status, transaction identifiers, or the last four digits of a payment method, rather than complete payment card details.

Client Information

Hair professionals may enter or collect information about their clients through the Services, including:

• Name
• Phone number
• Email address
• Appointment history
• Booking information
• Client notes
• Hair formulas and service information
• Preferences
• Photos
• Rebooking information
• Communications preferences
• Referral information

Hair professionals are responsible for ensuring that they have an appropriate basis to collect and use information about their clients.

Booking Information

When a client interacts with a Root & Foil booking page, we may collect information including:

• Name
• Phone number
• Email address
• Requested or scheduled appointment information
• Service selections
• Booking preferences
• SMS and email communication preferences
• Information voluntarily submitted during the booking process

Photos and Other Content

Users may upload photos, notes, formulas, and other information to the Services. We process this information to provide the features requested by the user.

Usage and Device Information

We may automatically collect certain technical information when the Services are used, including:

• IP address
• Browser type
• Device type
• Operating system
• App or website activity
• Pages or features accessed
• Approximate timestamps
• Error and diagnostic information
• Cookies or similar technologies

We use this information to operate, secure, maintain, and improve the Services.

2. How We Use Information

We may use information to:

• Provide and operate Root & Foil
• Create and manage user accounts
• Facilitate appointments and booking
• Maintain client records and appointment history
• Store notes, formulas, photos, and preferences
• Send appointment confirmations and reminders
• Send service-related account communications
• Process subscription payments
• Provide customer support
• Personalize and improve the Services
• Analyze product performance and usage
• Protect against fraud, misuse, and security threats
• Troubleshoot errors and maintain reliability
• Comply with applicable laws and legal obligations

We may also use aggregated or de-identified information that does not reasonably identify an individual to understand product usage, improve Root & Foil, and develop new features.

3. SMS Messaging and Mobile Information

Root & Foil may facilitate transactional text messages between hair professionals and clients who have consented to receive SMS communications.

These messages may include:

• Appointment confirmations
• Appointment reminders
• Appointment changes
• Cancellation or rescheduling information
• Other appointment-related or customer-service communications

Message frequency varies based on appointment activity. Message and data rates may apply.

Recipients may reply STOP to opt out of SMS messages and HELP for assistance.

Consent to receive SMS messages is not a condition of purchasing goods or services.

Mobile Information Sharing

We do not share, sell, rent, transfer, or provide mobile phone numbers, SMS opt-in data, or messaging consent information to third parties or affiliates for marketing or promotional purposes.

We may disclose mobile information to service providers solely as necessary to provide messaging services, such as SMS delivery infrastructure. These providers may use the information only to perform services for Root & Foil and may not use or disclose it for their own marketing or promotional purposes.

SMS opt-in consent and related records are not transferred to third parties for marketing or promotional purposes.

4. Email Communications

We may send transactional or service-related emails, including appointment confirmations, reminders, account notices, security notices, and administrative communications.

Where required, users may unsubscribe from non-essential or promotional email communications using the unsubscribe method provided in the message.

Certain administrative or service-related communications may be necessary to operate an account and cannot be opted out of while the account remains active.

5. How We Share Information

SMS DATA EXCLUSION

Notwithstanding anything else in this Privacy Policy, mobile phone numbers, text messaging originator opt-in data, SMS consent records, and messaging consent information will not be shared, sold, rented, transferred, or provided to third parties or affiliates for marketing or promotional purposes.

The sharing categories described below expressly exclude SMS opt-in and messaging consent data for marketing or promotional use.

We do not sell personal information.

We may share information in the following limited circumstances.

Service Providers

We may use third-party companies to help operate Root & Foil, including providers of:

• Cloud hosting
• Database and file storage
• Authentication
• Communications and SMS delivery
• Email delivery
• Payment processing
• Analytics
• Error monitoring
• Customer support
• Infrastructure and security

These providers receive information only as reasonably necessary to perform services for us and are subject to appropriate contractual or legal obligations.

At the Direction of Users

A hair professional may direct Root & Foil to use or disclose information through features of the Services, such as appointment communications, booking pages, or integrations.

Legal and Safety Requirements

We may disclose information if reasonably necessary to:

• Comply with applicable law, regulation, legal process, or governmental request
• Protect the rights, property, or safety of Root & Foil, our users, clients, or others
• Detect or prevent fraud, abuse, security incidents, or illegal activity
• Enforce our Terms of Service

Business Transfers

If Root & Foil is involved in a merger, financing, acquisition, restructuring, sale of assets, or similar business transaction, information may be transferred as part of that transaction, subject to applicable law.

6. Hair Professionals and Their Clients

Root & Foil provides tools used by independent hair professionals to manage their own client relationships.

For certain client information stored within a professional's account, the hair professional determines what information is collected and how it is used. Root & Foil processes that information to provide the Services.

Clients with questions about information maintained by a particular hair professional should generally contact that professional directly. We may assist with privacy requests when appropriate.

7. Data Retention

We retain information for as long as reasonably necessary to:

• Provide the Services
• Maintain an active account
• Fulfill the purposes described in this Privacy Policy
• Resolve disputes
• Maintain security and fraud-prevention records
• Comply with legal, tax, accounting, or regulatory requirements

Information may remain in backups for a limited period after deletion as part of normal backup and disaster-recovery processes.

8. Data Security

We use reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, alteration, disclosure, or destruction.

However, no internet-based service or method of electronic storage can guarantee absolute security.

Users are responsible for protecting their account credentials and notifying us if they believe their account has been compromised.

9. Your Choices and Rights

Depending on your location, you may have rights relating to your personal information, including the right to request:

• Access to personal information
• Correction of inaccurate information
• Deletion of certain information
• A copy of certain information
• Information about how personal information is used or disclosed

To submit a privacy request, contact us at hello@rootfoil.com.

We may need to verify your identity before fulfilling certain requests.

If your information is maintained by a hair professional using Root & Foil, we may direct you to that professional or coordinate with them to address your request.

10. SMS Opt-Out

You may opt out of Root & Foil-facilitated SMS messages at any time by replying STOP to a message.

After opting out, you may receive a confirmation of the opt-out. You will not receive additional SMS messages unless you subsequently provide consent again where permitted.

For assistance, reply HELP or contact hello@rootfoil.com.

11. Cookies and Similar Technologies

Our websites may use cookies and similar technologies to:

• Maintain sessions
• Remember preferences
• Improve security
• Understand how the Services are used
• Diagnose technical problems

Browser settings may allow you to block or delete cookies. Certain portions of the Services may not function properly if required cookies are disabled.

12. Children's Privacy

Root & Foil is designed for business users and their clients and is not intended for children under 13.

We do not knowingly collect personal information directly from children under 13 through account registration. If we become aware that such information has been collected in violation of applicable law, we will take appropriate steps to delete it.

13. Third-Party Services and Links

The Services may contain links to or integrate with third-party services.

Third-party websites and services operate under their own privacy practices, and Root & Foil is not responsible for those practices. We encourage users to review the privacy policies of third-party services they use.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically.

When we make changes, we will update the Effective Date at the top of this page. If changes are material, we may provide additional notice through the Services or by other appropriate means.

Continued use of the Services after an updated Privacy Policy becomes effective constitutes acknowledgment of the updated policy to the extent permitted by law.