Privacy Policy

This Privacy Policy describes how PlinQ OS Inc. (referred to as PlinQ, "we," "us," or "our") collects, uses, stores, shares, and protects information in connection with our cloud-based operating system, web applications, appointment scheduling widgets, mobile point-of-sale (POS) systems, client relationship management (CRM) software, and related services (collectively, the "Platform" or "Services").

Our Platform is engineered specifically for beauty, grooming, medical spa, and wellness providers including hair salons, nail lounges, barber shops, day spas, medical aesthetics practices, massage clinics, and multi-location franchises (each a "Merchant," "Subscriber," or "Salon Partner").

By accessing or using our Services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.

Under data protection frameworks including the European Union General Data Protection Regulation (EU GDPR), UK GDPR, and California Consumer Privacy Act (CCPA/CPRA), the legal designation of data handler depends on the relationship:

Note: PlinQ OS acts as a direct Data Controller only with respect to our direct relationship with you (e.g. account billing, merchant subscription management, and direct sales inquiries).

The wellness industry requires recording sensitive craft and health data. We treat this data with heightened isolation and encryption:

• Hair Color & Technical Chemical Formulas: Mixing ratios (e.g. developer volume, gram weights, tonal additives), processing times, patch test dates, and stylist notes. These are proprietary to your salon business and are stored encrypted.
• Before & After Treatment Photography: High-resolution photos uploaded by staff. Images are stored in private, cryptographically signed cloud buckets with restricted, time-limited presigned URLs.
• Medical Spa & Aesthetic Intake Forms: Skin classification, allergy questionnaires, contraindication checklists, consent signatures, and treatment zones (e.g. neurotoxin units or laser fluence settings). Access is governed by granular Role-Based Access Controls (RBAC).

PlinQ does not store, process, or transmit unencrypted Primary Account Numbers (PANs), CVVs, or magnetic stripe card data on our internal servers.

All payment processing whether initiated via online deposit booking or physical tap-to-pay on PlinQ Smart POS Terminals is executed via certified Level 1 PCI-DSS payment gateways (primarily Stripe). Payment cards are immediately converted to cryptographic tokens.

Our platform includes smart automation features such as predictive no-show alerts, smart gap-filling for calendars, and automated marketing copy generation. We enforce rigid contractual boundaries regarding artificial intelligence:

We never sell, rent, or monetize your customer records to advertisers or third parties. We share data only with audited cloud infrastructure providers and service vendors essential to operating PlinQ OS:

PlinQ OS employs defense-in-depth security principles engineered to protect salon franchises and independent operators alike:

We believe that software should earn your business every month, not hold your client relationships hostage:

• Complete Data Export: Salon owners can export full guest lists, contact details, formula histories, inventory counts, and financial transaction ledgers at any time in standard CSV and JSON formats directly from the dashboard.
• Post-Termination Grace Period: If you cancel your PlinQ OS subscription, your data remains accessible in read-only export mode for thirty (30) days to ensure smooth migration.
• Secure Purge: Following the 30-day grace period, all operational copies of your subscriber data are permanently overwritten and purged from active production databases in accordance with DoD 5220.22-M guidelines.

Regardless of your geographic location, PlinQ OS extends premier privacy protections:

We may update this Privacy Policy periodically to reflect enhancements to our platform features, new POS hardware additions, or regulatory updates. If we make material modifications, we will notify subscribers via in-app dashboard notices or email at least thirty (30) days prior to their effective date.