Privacy policy
Effective September 26, 2026
InPops ("we", "us") makes software that nail salons use to take bookings and walk-ins and to run their day. This policy explains what we collect, why, and who it goes to. It covers inpops.com, the booking pages at book.inpops.com, the salon app at app.inpops.com and the InPops iPad app.
What we collect
From salon owners and staff:
- Your name, email address and sign-in details. If you sign in with Google or Apple, we receive your name and email from them.
- Your salon's details: its name, address, phone number, hours, services, prices, the room, and your technicians' names and schedules.
- Billing details. Card payments are handled by Stripe; we never see or store your full card number.
From guests of a salon:
- What you give when you book, join a waitlist or check in on a salon's iPad: your name, mobile number, party size, the services you want, and any note or preferred technician.
- Your visits to that salon, so it can see who is coming and who has been.
- If you create a guest account, your mobile number, which we use to sign you in with a text code.
Automatically: basic technical information such as your IP address, browser and device type, kept in our server logs to run and secure the service. A paired iPad sends its name and app version so the salon can see it is working. We use browser storage only to keep you signed in and remember simple choices. We don't use advertising or analytics trackers.
How we use it
- To provide the service: showing a salon's times, taking and changing bookings, running the waitlist and sending the texts about your visit.
- To sign you in, keep your account secure and prevent abuse.
- To bill salons for their subscription.
- To answer you when you contact us, and to improve InPops.
We don't sell personal information, and we don't share it for advertising.
Text messages
If you give a salon your mobile number and agree to texts, we send texts about your visit: receipts, reminders, changes and when your seat is ready. They are not marketing. Reply STOP to stop and HELP for help; the full terms are at https://book.inpops.com/texts.
We don't sell, rent or share mobile numbers, or your consent to receive texts, with anyone for their marketing. Mobile information is shared only with the providers that deliver our texts, and only to deliver them.
Who sees it
- The salon. A guest's details are shared with the salon they book with or check in at. Where one owner runs several salons, their salons share one guest list.
- The providers that run InPops for us, only as needed to provide the service: DigitalOcean (servers and database), Vercel (websites), Supabase (sign-in), Stripe (payments), Twilio (texts), Google (maps, address lookup and Google sign-in), Apple (Apple sign-in) and Cloudflare (domain).
- Authorities, if the law requires it, or to protect people's safety or our rights.
- A buyer or successor, if InPops is sold or merged, under this policy.
How long we keep it
We keep a salon's information while its account is open. When an owner closes the account, we delete the salon's data, including its bookings and guest records, except what we must keep for tax, billing or legal reasons. Server logs are kept for a limited time.
Your choices
Salon owners can see and change their information in the app at any time, and can close their account in Settings. Guests can see, change or cancel a booking from the link in their text, and can ask the salon or us to correct or delete their details. To ask us for a copy of your information, a correction or deletion, email hello@inpops.com. We may need to confirm who you are first, and we won't treat you differently for asking.
If you live in California, you can also ask what personal information we have collected about you and how we used it, and you can ask us to delete it. We don't sell or share personal information as California law defines those words.
Do Not Track
Browsers can send a "Do Not Track" signal. We don't track you across other sites, so there is nothing for the signal to change.
Security
We protect information with encryption in transit, access controls and separate data for each salon. No system is perfectly secure, and we can't promise yours never will be exposed, but we will tell affected people if the law requires it.
Children
InPops is not meant for children under 13, and we don't knowingly collect their information. If you think a child has given us information, email us and we will delete it.
Changes
If we change this policy, we will post the new version here with a new date. If a change is significant, we will also tell salon owners by email or in the app.
Contact
Questions about privacy: hello@inpops.com.
