Privacy Policy

We collect the following categories of information:

• Account information. When you create an account we collect your email address and an authentication credential (a password or a magic-link token). Authentication is handled by our provider Supabase.
• Profile information. For stylists, this includes your display name, business name, location and service area, bio, the services you offer and their prices, and your availability. For clients, this may include a display name and contact details you choose to provide.
• Portfolio images. Stylists upload photos of their work. These images are stored and displayed publicly on your profile so clients can discover you by your craft.
• Booking data. When a client requests an appointment we collect the requested service, date and time, the stylist involved, any message you include, and the status of the request (pending, confirmed, or declined).
• Usage, device, and analytics data. We automatically collect information about how you use Stylistly — pages viewed, actions taken, approximate location, browser and device type, and similar diagnostics — using product analytics and cookies. This includes advertising attribution parameters such as the Google Ads click identifier (gclid) and campaign parameters (utm_source, utm_medium, utm_campaign, and related utm values) when you arrive from an ad or marketing link.

We use personal data to:

• Create and secure your account and authenticate you when you log in.
• Operate the marketplace — display stylist profiles and portfolios, power search and filtering, and route booking requests between clients and stylists.
• Send transactional messages such as booking confirmations and account emails.
• Understand how Stylistly is used so we can improve features, measure the performance of our marketing, and prevent fraud and abuse.
• Comply with legal obligations and enforce our Terms of Service.

Where required by law, our legal bases for processing include performance of our contract with you, your consent (for example, non-essential analytics and advertising cookies), and our legitimate interests in operating and improving the service.

We do not sell your personal data. We share it only with service providers who help us run Stylistly, and only as needed to provide the service:

• Supabase — database, authentication, and storage for accounts, profiles, bookings, and portfolio images.
• Vercel — application hosting and content delivery.
• PostHog — product analytics to understand usage and improve the service.
• Google Ads — advertising measurement and conversion attribution for our marketing campaigns.
• Resend — delivery of transactional and account emails.
• Stripe — payment processing for stylist listing subscriptions. Payments are not currently active; when billing launches, Stripe will process card details directly and we will not store full card numbers.

We may also disclose information when required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets.

We use cookies and similar technologies for two purposes: essential functionality (such as keeping you logged in) and analytics and advertising (such as PostHog product analytics and Google Ads conversion measurement). Essential cookies are required for the service to work. Analytics and advertising cookies help us measure usage and the effectiveness of our ads.

How to opt out. You can block or delete cookies through your browser settings, and most browsers let you refuse non-essential cookies. You can opt out of Google Ads personalization at Google Ads Settings and use browser “Do Not Track” or global privacy control signals where available. Disabling non-essential cookies will not affect your ability to use the core features of Stylistly.

We keep personal data for as long as your account is active and as needed to provide the service. Booking records are retained while they remain relevant to you or a stylist and to meet legal, accounting, and dispute-resolution requirements. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we are required to retain it by law or to resolve disputes and enforce our agreements.

Depending on where you live, you may have the right to access, correct, export, or delete the personal data we hold about you, to object to or restrict certain processing, and to withdraw consent. These rights are provided under laws including the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act (CCPA/CPRA), and applicable Canadian and Australian privacy laws.

To exercise any of these rights, email us at hello@stylistly.draftlabs.org. We will respond within the timeframe required by applicable law and may need to verify your identity first. You also have the right to lodge a complaint with your local data protection authority.

Stylistly is not directed to children. You must be at least 16 years old to create an account or use the service. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

We operate across the US, UK, Canada, and Australia, and our service providers may process data in other countries. Where personal data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses to protect it.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, provide additional notice. Your continued use of Stylistly after an update means you accept the revised policy.

If you have questions about this Privacy Policy or how we handle your data, email us at hello@stylistly.draftlabs.org.