1. Scope of this Privacy Policy
This Privacy Policy explains how Navi Booking collects, uses, discloses, and protects information when salon owners, staff members, prospects, and other users interact with Navi Booking, including through the Navi Staff mobile app. It also explains the role Navi Booking plays when salons use the platform to manage their own client records and communications.
Where a salon uses Navi Booking to store or communicate about its clients, the salon generally controls the client relationship and determines what information is entered into the service. In that context, Navi Booking generally acts as a service provider or processor for the salon. Navi Booking separately acts as a controller for information about our own business contacts, account holders, billing contacts, marketing leads, product usage telemetry, and platform-security records.
2. Information we collect
Depending on how Navi Booking is used, we may collect account and identity information, subscription and billing information, salon configuration data, staff and role information, appointment and checkout details, client profile and contact information, device and browser information, support correspondence, security logs, and communications metadata such as delivery status, provider responses, user agent, IP-derived security signals, and event timestamps. This includes identifiers such as your account (user) ID and staff ID and, in the Navi Staff mobile app, a device identifier; see "Navi Staff mobile app" below for what the app collects, including the approximate city and country that our authentication provider may derive from the IP address of your sign-in session.
Salons may also choose to enter or import client contact data, notes, appointment preferences, loyalty or rewards information, salon credit information, membership or package information, communication preferences, consent records, opt-out records, suppression flags, message history, delivery status, and other service records into Navi Booking. That information is processed on the salon's behalf so the salon can operate its business.
3. How we use information
We use information to operate the service, authenticate users, provide support, prevent abuse, process subscriptions, maintain consent and suppression records, send or support service communications, improve product performance, monitor reliability, secure accounts, investigate incidents or disputes, comply with legal obligations, and communicate with customers or prospects about Navi Booking.
We may also use service data to generate operational analytics, usage summaries, audit trails, and product-improvement insights. Where feasible, we limit access to the data needed for the task being performed.
4. Salon data and client communications
When a salon uses Navi Booking to manage its clients, appointments, reminders, wallet or pass links, loyalty or rewards notices, salon credit workflows, feedback requests, rebooking prompts, referral prompts, marketing campaigns, or other message workflows, the salon remains responsible for the legality of the data it chooses to collect, enter, import, or use and the messages it sends. Navi Booking processes those records to provide the requested platform functions.
Because salons control the client relationship, questions about a salon's own notices, consent collection, appointment practices, or customer messaging should generally be directed to that salon first.
5. Sharing information
We may share information with service providers and subprocessors that help us operate Navi Booking, such as hosting providers, authentication vendors (Clerk), communications vendors (Twilio for text messages and SendGrid for email), wallet or pass providers, analytics vendors, support tools, and payment-related providers (Stripe, including Stripe Terminal for in-person card payments on salon card readers). Those providers may help us send or support transactional, operational, account, service, promotional, loyalty, rewards, marketing, billing, security, and customer-engagement communications where those features are enabled. We may also disclose information when required by law, to protect rights or safety, to investigate fraud or abuse, or in connection with a merger, acquisition, financing, or asset transfer.
We do not sell salon client data for cross-context behavioral advertising. We do not share end-customer appointment records with unrelated third parties except as needed to provide the service, comply with law, enforce our terms, or protect the platform.
6. Messaging, AI, and product telemetry
Navi Booking may process message metadata, delivery results, recipient-suppression status, template content, consent-related records, opt-out signals, AI prompts, AI outputs, device telemetry, and usage analytics so the service can function, maintain communication records, suppress opted-out recipients, be secured, be debugged, investigate disputes, comply with provider or legal requirements, and be improved. We work to minimize unnecessary retention of sensitive material and may redact or shorten certain operational records when retention windows expire.
If you use AI-assisted features, you should not assume every output is accurate or appropriate for your business context. Human review remains important, especially for client-facing messaging and compliance-sensitive workflows.
7. Navi Staff mobile app
Navi Staff is the iPhone app a salon's owners and staff use to see their day, book and check in clients, and record sales. When you use it:
- Sign-in and identifiers. Your email address and sign-in codes or password are handled by our authentication provider, Clerk. To keep you securely signed in, the app sends Clerk your account ID and a device identifier that Apple assigns to our apps on your phone (not an advertising identifier), together with your device model and iOS version. Requests to Navi Booking carry your account ID and the salon you selected; your staff ID comes from your salon membership.
- Approximate location from your sign-in session. Navi Staff does not request iPhone Location Services (Core Location) and does not read your phone's GPS or precise location. Our authentication provider, Clerk, may derive an approximate city and country from the IP address of your sign-in session as part of its sign-in and account-security functionality. This approximate location is linked to your account and is not used for tracking or advertising.
- Salon records you create. Bookings you make (the client, service and time), appointment check-ins, undos and no-shows, walk-in names and phone numbers you enter, and sales you record (services, prices, tips, discounts and any discount note, and loyalty coupons you apply) are sent to Navi Booking and stored with your salon's records, as described in "Salon data and client communications".
- Client information on the phone. Authorized staff see client names and visit history from the salon's records, and a client's contact details only where the salon owner has granted that access. The app does not show client notes.
- Card payments. The current version of Navi Staff does not take card payments and does not include Stripe's payment software or Stripe Terminal. Sales you record in the app are covered under "Salon records you create."
- Notifications. The current version of the app does not send push notifications. If a later version offers them and you allow them, the app will register your phone's push-notification token (issued by Apple Push Notification service) and a device identifier with Navi Booking, linked to your staff account, so we can send you work notifications for your salon; you will be able to turn them off in iOS Settings.
- What the app does not do. The app does not track you across other companies' apps or websites and does not use advertising identifiers or advertising software. Navi Staff does not collect app-interaction telemetry such as app launches, screen views, taps, clicks or scrolling. It does not request iPhone Location Services, and it does not request or use Bluetooth access. It does not access your contacts, photos, camera or microphone.
- App Store privacy details. The information the Navi Staff app collects, including the approximate location described above, is linked to your account and is collected to provide the app's functionality. None of it is used to track you. Navi Staff does not collect Product Interaction data.
8. Cookies and similar technologies
We and our service providers may use cookies, local storage, and similar technologies to keep users signed in, remember preferences, measure performance, detect abuse, and understand product usage. Disabling some cookies may affect product functionality.
9. Data retention
We retain information for as long as reasonably necessary to provide the service, satisfy contractual commitments, comply with legal obligations, resolve disputes, enforce our agreements, prevent fraud, and maintain platform security. Different categories of data may be retained for different periods depending on business need and legal requirements.
Even after an account is closed, Navi Booking may retain limited records needed for billing, security, fraud prevention, abuse prevention, audit history, legal compliance, or backup integrity.
10. Security
We use reasonable administrative, technical, and organizational safeguards intended to protect information. No system is completely secure, and we cannot guarantee absolute security. You are responsible for using strong credentials, protecting devices, and limiting account access to authorized users.
11. International data handling
Navi Booking may process or store information in the United States or other jurisdictions where we or our service providers operate. If information is transferred across borders, we take steps that are intended to support lawful transfers where required.
12. Your choices and rights
Depending on your relationship to Navi Booking and where you are located, you may have rights to access, correct, delete, or restrict certain personal information, or to object to certain processing. Because salons control their own client relationships, requests about salon-controlled client records should usually be directed to the salon first.
You may also opt out of certain marketing communications from Navi Booking by following the instructions in those communications.
If you are a salon staff member, ask your salon owner to remove your access to the salon. To have your Navi Booking login and staff information deleted, email support@navi-booking.com; after confirming it is you, we will delete or de-identify your account information: your login (unless you still use it at another salon on Navi Booking) and your staff profile, such as your contact details and photo. We keep the records the salon or we must keep for legal, tax, payroll, financial or audit reasons, such as sales and tips, commission and payroll, refunds, approvals and audit logs; those records keep your name and staff identifier as they were recorded.
13. Children
Navi Booking is not directed to children, and we do not knowingly collect personal information from children in a manner that would require special treatment under applicable law. Salons are responsible for how they collect and use information about their own clients.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. Material changes may require renewed acceptance by the account holder before continued use of protected owner functionality. Navi Booking's internal acceptance record controls which version of this Privacy Policy was accepted for audit purposes.
15. Contact
Questions or privacy requests may be sent to support@navi-booking.com.
This Privacy Policy describes Navi Booking's handling of information. It does not replace the salon's own duty to provide customer-facing notices or obtain any consent required for the salon's own communications, records, marketing practices, imported contacts, or customer-data handling. Final attorney review is still recommended before production use of your salon's legal, privacy, and communications disclosures.