Privacy Policy
Effective as of August 3, 2026 β’ Last updated: August 8, 2026
1. Data Controller Disclosures
2. PayPal Payment Data Processing
GetSalonFlow uses PayPal Holdings, Inc. as a third-party payment processor for Pro and Max subscription payments.
What GetSalonFlow shares with PayPal:
- Payment amount and currency (e.g., 9,990 HUF)
- Order description (e.g., "GetSalonFlow Pro β Monthly")
- Internal reference code (GSF Order ID)
What GetSalonFlow does NOT receive or store:
- β Card numbers, CVV codes, or expiration dates
- β PayPal account credentials
- β Bank account or IBAN details entered on PayPal
GetSalonFlow only receives a transaction success/failure notification and the PayPal Order ID / Capture ID. PayPal acts as an independent data controller for payment data. See PayPal's Privacy Statement.
3. Data Processors & Infrastructure
We work with trusted GDPR-compliant processors including Vercel (Hosting), Supabase (Database/Auth in AWS EU Frankfurt), Resend (Transactional emails), Mapbox (Maps), Cloudflare (CDN/WAF), Upstash (Redis rate limiting), and PayPal (Payment processing).
4. Your GDPR Rights
You have the right to access, rectify, erase ("right to be forgotten"), restrict, and export your personal data by contacting hello@getsalonflow.com. For PayPal-related data, rights may also be exercised directly with PayPal via their privacy portal.