Privacy Policy

Who we are

Sylbma (operated by Odelvisbarbershop Corp) provides a barbershop management platform: shop owners and barbers manage bookings, clients, staff, and payments; clients discover shops and book appointments. For questions about this policy, contact [email protected].

Information we collect

Account information

When you create an account we collect your name, email address, phone number, and a password (stored only as a secure hash — we can never see it). Shop owners additionally provide business details such as shop name, address, photos, services, and operating hours.

Booking & appointment data

Appointments you create or receive: date, time, services, staff member, pricing, status, and any notes attached to the visit.

Client records entered by shops

Shops may add records about their clients (for example a walk-in client's name and phone number, visit history, or preferences). For this data, the shop is the data controller and Sylbma acts as a processor on the shop's behalf. Shops are responsible for having a lawful basis to store this information.

Payment information

Card payments are processed by Stripe. Sylbma never stores your full card number, CVC, or card credentials — those go directly to Stripe. We store payment metadata only (amounts, status, method, receipts, deposit records).

Device & usage data

Push notification tokens (so we can deliver booking updates), device type, app version, and basic usage analytics that help us improve the product. We do not sell this data.

How we use your information

• To provide the service: bookings, calendars, payments, receipts
• To send transactional notifications (confirmations, reminders, changes)
• To provide customer support
• To secure the platform and prevent abuse or fraud
• To improve the product through aggregate usage analysis

We do not sell your personal information, and we do not share it with third parties for their own advertising.

Sharing

We share data only with:

• Stripe — payment processing (see their privacy policy)
• Infrastructure providers — hosting, databases, and push notification delivery, bound by data processing agreements
• The other party to your booking— a shop sees the bookings its clients make; a client sees the shop's relevant details
• Authorities — only where required by law

Retention

We keep your data while your account is active. When you delete your account, personal data is removed within 30 days, except records we must keep for legal, tax, or fraud-prevention purposes (kept only as long as required). See Account Deletion for the exact process.

Your rights

Depending on where you live (including under GDPR and CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. To exercise any of these rights, email [email protected]. We respond within 30 days.

Children

Sylbma is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will remove it.

Security

Data is encrypted in transit (TLS) and at rest. Access to production systems is restricted and audited. No system is perfectly secure — if we learn of a breach affecting your data, we will notify you as required by law.

Changes to this policy

If we make material changes we will notify you in the app or by email before they take effect. The "Last updated" date at the top reflects the current version.