Privacy Policy
Last updated May 1, 2026
1. Who we are
PocOS is the controller of personal data you provide directly to us (e.g. when you create an account). For data you upload about your salon's customers and employees, you are the controller and we are the processor — see our DPA.
2. What we collect
Account data (name, email, role), salon data (services, schedules, customers, appointments), usage data (pages visited, features used), and technical data (IP address, device, browser).
3. How we use it
To provide and improve the Service, generate AI insights for your salon only, send transactional and security notices, comply with legal obligations, and prevent fraud.
4. Legal bases
Contract (to deliver the Service), legitimate interest (to secure and improve it), legal obligation (tax, accounting), and consent where required.
5. Sharing
We share data with sub-processors strictly necessary to operate the Service (hosting, email, payments). We never sell personal data. A current sub-processor list is available on request.
6. Retention
We retain account data for the life of the account plus 30 days. Salon data is retained per your plan and can be exported or deleted at any time.
7. Your rights
Subject to applicable law, you may access, correct, export, or delete your personal data. Contact privacy@pocos.app to exercise these rights.
8. Security
We use industry-standard safeguards including encryption in transit and at rest, least-privilege access controls, and regular security reviews.
9. International transfers
Where data is transferred outside its country of origin, we rely on standard contractual clauses and equivalent safeguards.
10. Contact
Privacy questions? Email privacy@pocos.app.