Privacy Policy

This Privacy Policy explains how ASH Studios, LLC (“ASH.STUDIO,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you visit our website, sign up for the ASH.STUDIO salon CRM, or interact with any client-facing form we host on behalf of a salon using our platform.

We wrote this in plain English on purpose. If any part of it is unclear, email us at hello@ash.studio and we’ll walk you through it.

1. Who we are

ASH Studios, LLC is a Utah limited liability company (EIN 86-1590718) operating the ASH.STUDIO software-as-a-service platform. Our mailing address is available on request via the contact email above.

2. Information we collect

2.1 Information you give us directly

• Account information: name, email address, business name, phone number, and password (managed by our authentication provider, Clerk).
• Billing information: payment card details, billing address, and tax information, collected and stored by our payment processor, Stripe. We never see or store full card numbers.
• Salon operations data: client records, appointment notes, consultation intake responses, follow-up drafts, and any other content you or your team create inside the platform.
• Support requests: anything you send us by email or chat.

2.2 Information collected from your clients

When your clients submit a consultation intake form or receive automated messages, we collect the information required to deliver that service on your behalf — typically name, email address, phone number, service preferences, and photos or notes they choose to share. We treat this information as your data and process it only under your instructions.

2.3 Information collected automatically

• Log data (IP address, browser type, pages viewed, timestamps).
• Device and usage metadata to keep the platform reliable and secure.
• First-party cookies for authentication and session management. We do not use third-party advertising cookies.

3. How we use information

• Provide, maintain, and improve the ASH.STUDIO platform.
• Process payments and send billing communications.
• Send transactional email and SMS related to your account (trial reminders, receipts, security notices) and, at your request, transactional messages to your clients on your behalf.
• Respond to support requests.
• Detect, prevent, and address fraud, abuse, or security issues.
• Comply with legal obligations.

4. SMS and messaging consent

ASH.STUDIO sends SMS messages through Twilio. By providing your phone number and opting in, you consent to receive account and service messages from us. Message frequency varies. Message and data rates may apply. Reply STOP to opt out at any time or HELP for help.

When your salon uses our platform to message your own clients, your clients’ consent is captured on the intake form or by your salon at the point of collection. We do not share, sell, or use your clients’ phone numbers for our own marketing.

5. Who we share information with

We share information only with the sub-processors required to operate the platform:

• Clerk — user authentication and session management.
• Stripe — payment processing, subscription management, and tax handling.
• Twilio — SMS and voice delivery.
• Resend — transactional email delivery.
• Neon — managed Postgres database hosting.
• Vercel — application hosting and edge delivery.

We do not sell your personal information, and we do not share it with advertisers, data brokers, or any third party for their own marketing.

6. How long we keep information

We retain account and salon data for as long as your account is active. If you cancel, we retain your data for 30 days to allow reactivation, then delete or anonymize it. Billing records are retained longer where required by law.

7. Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct information that is inaccurate.
• Delete your information (subject to legal exceptions).
• Export your data in a portable format.
• Object to or restrict certain processing.
• Withdraw consent to marketing at any time.

Email us at hello@ash.studio to exercise any of these rights. We respond within 30 days.

8. Security

We use encryption in transit (TLS 1.2+) and at rest, tenant isolation at the database layer, and least-privilege access controls for engineering staff. See our Security page for details.

9. International users

ASH.STUDIO is operated from the United States. If you access the platform from outside the U.S., you consent to the transfer of your information to the United States.

10. Children

ASH.STUDIO is not directed to children under 13, and we do not knowingly collect personal information from children.

11. Changes to this policy

We’ll update this page when our practices change and revise the effective date at the top. Material changes will be announced by email to account owners.