Privacy Policy

What this policy covers

This policy explains what personal information Pamperly LLC, the Texas limited liability company that operates Pamperly (“Pamperly”, “we” or “us”), collects, what it is used for, who can see it, and the choices you have. It covers pamperly.us, the provider websites Pamperly serves at addresses like their-name.pamperly.us, our emails and text messages, and the support chat.

Pamperly is a marketplace that connects customers with independent beauty professionals, and it is offered in the United States. Providers are independent businesses, not part of Pamperly. What a provider does with information you hand them directly is their responsibility, and the section below on independent providers explains where our rules still follow your information. A link that leads off Pamperly, such as a provider's Instagram or outside website, is covered by that site's own policies, not this one.

This policy describes what the product actually does today. If a sentence here says we do not do something, we do not do it, and we will change this policy before we start.

What we collect from customers

To create an account we collect your name, email address and phone number. Signing in works through a one-time code texted to your phone, through your Google account, or through a sign-in link emailed to you. There are no passwords on Pamperly, so we never store one.

When you book, we collect the appointment details: the service, the date and time, whether it happens at your place or the provider's, and the service address you save or type, including the unit and any access notes you add, such as a gate code or parking instructions. We keep your booking history and its status changes with the reasons given for cancellations and declines, the messages you exchange with a provider in the booking chat, the reviews you write, and the providers you mark as favorites. If you pay by card on Pamperly, we keep a record of the payment: the amount, its status, any refunds and the reason for each, Square's reference for the payment and its receipt link. We never see or store the card number.

If you book an appointment for someone under 18 in your care, the booking and anything you tell the provider about it stay on your account. We do not open an account for the minor or build any record about them.

What we collect from providers

A provider application includes your name, contact details, business name, the services you offer with prices and durations, your availability, your service area, where you work, portfolio photos and videos, your profile text, and any links or branding you choose to show.

If you choose to add a license or certificate, the photos of it become part of your application. They are stored privately, only an admin reviewing applications can open them, and they are never shown on your profile or sent to a customer. Your profile shows the name of the credential and nothing else, as your own claim. Pamperly does not verify, vet, license, certify, insure or background-check providers, so no verification record about you exists here, and nothing on Pamperly will ever say one does.

If you connect your Google Calendar, we store which Google account you connected and an encrypted token that lets Pamperly read busy times only: start and end times, never event titles, guests, locations or descriptions. Pausing the connection keeps the link and stops busy times being applied; disconnecting deletes the token.

Where Pamperly offers card payments, you can connect your own Square account. We then store your Square business name, merchant and location identifiers, and encrypted tokens that let Pamperly read your Square business profile, charge cards into your Square account and refund those charges for your bookings, and nothing else. Disconnecting deletes the tokens.

Where Pamperly offers it, you can connect your Google Business Profile so your Google reviews can appear on your Pamperly profile. We then store which Google account you connected, which business listing, and an encrypted token from Google. Google offers only one permission for Business Profiles, and it is broader than reading reviews; Pamperly uses the token only to read your listing and its reviews, and we keep a copy of those reviews (the reviewer's name as Google shows it, the rating, the words and the dates) to show on your profile. Pausing stops the copying; disconnecting deletes the token and every copied review.

If you host customers at your place, we collect that address. A home studio is shown publicly only as an approximate area on a map, never as a street address. A business address you choose to publish is shown as you submitted it.

Visitors, the waitlist and outside reviews

You can browse Pamperly without an account. If you join the waitlist for an area we do not cover yet, we keep the email address you give (or your account email if you are signed in), the Zip you entered and the service you asked about, so we can tell you when someone covers it, and we record when we told you.

Providers can invite people they served outside Pamperly to write a review through a share link, with no account needed. If you write one, we collect the name you sign it with, the business name you give if any, your rating and your words. Your IP address is not stored with it: we keep only a salted cryptographic hash of it, which lets us investigate abuse without being able to read the address back.

If you use the support chat while signed out, your browser keeps an anonymous identifier so the conversation stays with you on that device, and we keep whatever contact details you type into the chat so the team can reply.

Until launch, the site can be explored in a demo mode populated by fictional accounts. Demo activity is fenced off from real accounts and never counts toward a real provider's reviews or ratings.

What we collect automatically

Our servers keep standard technical logs: IP address, browser type, the pages requested and when. They exist for security, debugging and abuse prevention, and they are kept by our cloud provider for a limited time. Endpoints that cost us money per call, such as address lookups and uploads, are rate-limited per IP address using short-lived counters.

Certain sensitive actions create a durable record on purpose. Opening a street address writes an access log entry. Administrative and account actions write audit entries that cannot be edited afterwards. Those records exist to protect you, and the retention section explains why they are kept.

There is no advertising tracking, no third-party analytics, no session recording and no device fingerprinting on Pamperly. The only time we ask your browser for your location is when you press “Use my location” in search, described below, and we never read it in the background.

What we never collect

Pamperly never collects card numbers, bank details or any other payment credentials. Most bookings are paid to the provider directly, outside Pamperly. Where a provider takes card payments on Pamperly, you type your card details into fields that Square, the payment processor, runs inside our page: they go straight to Square, and Pamperly receives only a one-time token to make that single charge. No payment method is ever saved on your Pamperly account. If anything asks for your card details for Pamperly anywhere other than those card fields when you send a booking request, it is not us. Close it and tell us.

We do not collect government identifiers, Social Security numbers, dates of birth, biometric data or health records, we do not run background checks on anyone, and we do not buy information about you from data brokers. If you choose to mention something personal in a message or a booking note, for example an allergy a provider should know about, it is stored as part of that conversation or booking, visible to the people described in this policy, and used for nothing else.

How addresses are protected

Your street address, unit and access notes are encrypted inside the application before they reach the database, each record under its own key, and those keys are themselves encrypted under a master key that is never stored with the data. A copy of the database alone does not reveal an address.

A provider sees only your city and Zip until two things are true: they have accepted the booking, and the appointment is less than 24 hours away or the provider has started traveling to you. Only then is the street address released, and only for that booking. Every time an exact address is opened, a log entry is written first, recording who opened it, when, and from what IP address and browser. You can always see an address you entered yourself.

When you book at a provider's place, the address works the other way around: it is a business location, so it is shown to you as soon as the provider accepts.

Pamperly staff have no browse-anywhere view of addresses. When handling a specific incident requires one, staff access goes through a separate path that writes the same access log.

Photos, videos and other uploads

Every image uploaded to Pamperly is decoded and re-encoded before it is stored. That strips the hidden metadata a phone embeds in a photo, including the GPS coordinates of where it was taken, so an uploaded photo cannot quietly reveal a home address. Files are stored in a private bucket and served only through Pamperly's own routes, which check who may see each kind of file. There are no permanent public links, so removing a photo actually stops it being served.

Portfolio photos and videos appear on the provider's published profile. License and certificate photos stay private to reviewing admins, as described above. Photos sent in the support chat are visible to you and to the Pamperly team inside that conversation, and nowhere else.

Providers must have a client's okay before publishing a photo that shows the client's face. If a photo of you is on a provider's profile and you did not agree to that, email support@pamperly.us and we will review it.

What is public

A provider's published profile is public: display name, services, prices, availability, service area, portfolio, reviews, the rating computed from those reviews, and the names of any credentials disclosed, shown as the provider's own claims. Provider email addresses and phone numbers are never published. The same published profile also appears at the provider's own Pamperly website address when they have one.

While a provider's application is pending review, their profile page can be opened by anyone who has the link. It is marked as a preview, excluded from search engines, not listed in marketplace search, and cannot take bookings. Profiles that were rejected or suspended are not publicly viewable.

Reviews you write as a customer appear with your first name and last initial. An outside review appears with the name its writer signed it with. A provider can answer a review with one public reply, which appears under it. The home page shows a selection of five-star reviews, as the Terms of Service describe. Where a provider has connected their Google Business Profile, their Google reviews can appear on their profile, labelled as from Google, with the reviewer's name as Google shows it.

Who can see what

The provider you book sees your name, the appointment details, the messages you send, and your address under the release rule above. Pamperly does not give providers your phone number or email address, and does not give you theirs; the booking chat is how the two of you reach each other.

Messages between a customer and a provider are visible to the two of them, and to Pamperly admins for content moderation and dispute handling. Messages are also checked automatically for patterns such as payment-app handles, phone numbers, email addresses and payment links. A match only flags the message for a person to look at: nothing is blocked, edited or hidden automatically, and no account is ever penalized by a machine.

Admins can see provider applications, contact details and internal review notes in order to review profiles. Private admin notes are never visible to providers or customers. Admin actions are themselves written to an audit log that cannot be edited afterwards.

Who else processes your data

Pamperly runs on Google Cloud in the United States: the application, the database and file storage live there. Sign-in is handled by Google Firebase Authentication, which receives your phone number or email address to send your code or sign-in link. Addresses you type are geocoded with Google Maps, pages that show a map load Google Maps in your browser, and if you press “Use my location”, your coordinates go to Google once and come back as a Zip code. The AI features described below run on Google Vertex AI, and a provider's optional calendar connection reads busy times from Google Calendar. Card payments on Pamperly, where a provider offers them, are processed by Square, which receives your card details directly from your browser, along with the amount and the booking's reference, and pays the provider. Where a provider connects their Google Business Profile, Google's Business Profile service supplies that listing and its reviews to Pamperly.

Email is delivered by Resend, which receives the recipient address and the message; we keep our own record of each send, the recipient and subject line. Text messages are delivered by Bird (formerly MessageBird), which receives the phone number and the text. Provider websites at addresses like their-name.pamperly.us are served through Cloudflare, which relays those requests to Pamperly and sees the ordinary technical traffic for those pages. When you write to support, the Pamperly team is alerted in its private team chat, run by a third-party messaging service, which receives a short preview of your message, roughly the first 200 characters, and a link back to the conversation; admins can receive the same preview by email.

These companies process data only to deliver their service to Pamperly. We do not send any of them your information for their own marketing, and none of this is a sale of your information.

Providers are independent businesses

Once a booking shares your information with a provider, that copy is in the provider's hands, the same as if you had walked into their salon. Providers must follow the law and the Provider Terms in how they treat it, and using booking information for anything beyond serving you, such as unsolicited marketing or passing contact lists around, is grounds for removal from the marketplace. If you believe a provider mishandled your information, tell us at support@pamperly.us and we will act on our side of it; we cannot reach into systems that are not ours.

What you share with a provider directly and outside Pamperly, such as a payment handle at the appointment or a number you text them from, is between you and them, and this policy cannot cover it.

Automated assistant and AI drafting

The support chat may answer first with an automated assistant. Those replies are always labelled “Automated reply”, and the assistant stops as soon as a person from the Pamperly team joins the conversation. To generate a reply, the most recent messages in the conversation, up to the last twelve, are sent to Google's Vertex AI service, together with a yes-or-no note about whether we already have a way to reach you; the note never contains the contact details themselves.

If you type an email address or phone number into the support chat, it is saved on the conversation so the team can reach you.

Providers can ask Pamperly to draft profile text, website copy or a logo image. The model receives what the provider typed and the relevant parts of the provider's own profile, and nothing about anyone else. A draft is a suggestion the provider reviews and chooses to publish, and every AI feature is rate-limited per profile.

These requests go to Google's global AI endpoint, so they can be processed in Google data centers outside the region where Pamperly's own data is stored. No decision about your account is ever made by a machine: approvals, suspensions and review moderation are done by people.

Emails, texts and how to stop them

We send transactional messages only, meaning messages about your own account and bookings, and we send no marketing emails and no marketing texts. The texts you can receive are: a one-time sign-in code; for providers, a text when a customer requests or cancels a booking and a reminder while a request is still waiting; for customers, a text when your provider is on the way; and a reply from the support team at a number you gave them. Message and data rates may apply. Reply STOP to stop texts from us or HELP for help; sign-in codes come from our sign-in service and stop when you stop signing in by phone.

Emails cover your bookings, your account, and the waitlist notification you asked for. Booking emails and texts are part of how appointments work, so they cannot be switched off one by one yet; close your account and they stop. We never sell or rent your phone number or email address.

Cookies and your browser

Pamperly sets a session cookie (“__session”) that keeps you signed in; it expires after about an hour and is refreshed while you use the site. Two small cookies (“pm_zip” and “pm_where”) remember the last Zip you searched and whether you were looking at your place or the provider's, so search picks up where you left off. Short-lived cookies protect the Google Calendar, Google Business Profile and Square connection flows while they run. The support chat stores an anonymous identifier in your browser's storage so a conversation started while signed out stays with you on that device.

If you turn on the pre-launch demo, two cookies (“__demo_armed” and “__demo_actor”) remember that choice and which fictional demo account you are viewing as; leaving the demo clears them.

There are no advertising cookies, no third-party analytics cookies and no cross-site tracking on Pamperly. Because we do not sell or share personal information and run no targeted advertising, there is nothing here for an opt-out preference signal such as Global Privacy Control to switch off; if that ever changes, we will honor those signals and rewrite this section first. We do not respond to Do Not Track headers for the same reason: there is no tracking to stop.

How information is protected

Connections to Pamperly use HTTPS. Data is stored on Google Cloud, which encrypts storage at rest, and the most sensitive fields, street addresses, calendar tokens, Google Business tokens and Square tokens, are additionally encrypted by the application itself with per-record keys. Images live in a private bucket served only through access-checked routes, street address access is logged, administrative actions go to an append-only audit log, and admin abilities are divided by role.

Sign-in uses one-time codes and links instead of passwords, so there is no Pamperly password to steal, guess or reuse. Protect the phone number and email account you sign in with, and tell us right away if you lose control of either.

No internet service can honestly promise perfect security, and we do not. If a security incident puts your personal information at risk, we will notify you and the authorities as the laws of your state require.

How long we keep information

Your account information is kept while your account exists. Booking, messaging, review and acceptance records are kept while the account exists too, because they document what was agreed and what happened between you and your provider.

If you close your account or ask us to delete your data, we delete what we can and keep only what we genuinely still need: records the law requires us to keep, records needed for an open dispute or a safety matter, the abuse-prevention records described above, and the other side's own copy of shared history, since your messages to a provider are also part of their conversation.

Address access logs and audit records are kept even after a deletion, because their entire purpose is to prove later who saw what and who did what.

Waitlist entries are kept until we have told you about coverage or you ask to be removed. Support conversations are kept so the team has history, and you can ask for yours to be deleted. Routine infrastructure backups can hold deleted data briefly before rotating out, and server logs are kept for a limited time.

Your rights, wherever you live

You can ask for a copy of the personal information we hold about you in a portable form, ask us to correct it, ask us to delete it, or object to a use this policy describes. We extend these rights to every user in every state, whether or not a privacy statute happens to apply to a company of our size.

Ask through the support chat on any page or by email at support@pamperly.us; both channels work. We answer within 45 days, and if a request is unusually complex and the law allows more time, we will tell you within those 45 days. Because sign-in uses one-time codes, we verify a request by confirming you control the email address or phone number on the account; if you never had an account, we match the contact details you used with us. An authorized agent can act for you with your written permission, and we will still confirm directly with you. We never charge for a first request, and we never treat you worse for making one.

If we refuse a request, we will say why, and you can appeal by replying that you want to appeal. The appeal is reviewed again and answered within 60 days. If you are still unsatisfied, you can complain to your state's attorney general.

California residents

The categories of personal information we collect are the ones this policy describes: identifiers (name, email address, phone number); customer records (service addresses, including the exact home addresses we encrypt, and booking details); commercial information (bookings, card payment records, reviews, favorites, the waitlist); internet activity (the server logs and cookies above); approximate location (the Zip you search, and the one-time “Use my location” lookup); photos and videos you upload; professional information for providers (application details and unverified credential claims); and the content of messages. We collect them from you, from your device automatically, and from the sign-in provider you choose. We use them for the purposes this policy describes and disclose them only to the recipients it names.

We have never sold personal information, we do not share it for cross-context behavioral advertising, and neither happened in the preceding 12 months, so there is nothing to opt out of, and that includes the information of anyone under 16. We do not use sensitive personal information, such as an exact home address or its access notes, for anything beyond arranging and delivering the appointment you asked for, so there is no use of it to limit.

California law gives you the rights the section above already grants everyone: to know and access, to correct, to delete, to a portable copy, and to be free of discrimination for exercising them. California's “Shine the Light” law lets you ask which personal information was shared with third parties for their direct marketing. The answer is none, and you can have that in writing by asking.

Texas residents

The Texas Data Privacy and Security Act gives you the right to confirm whether we process your personal data, to access, correct and delete it, to get a portable copy, and to opt out of targeted advertising, the sale of personal data, and profiling that produces legal or similarly significant effects. We do none of those three things: no targeted advertising, no sale, and no such profiling. The access, correction, deletion and portability rights work exactly as described above, including the appeal, which Texas law requires and which we answer within 60 days. If the appeal fails, you can raise the matter with the Texas Attorney General.

Other states

We apply the same rights everywhere, so residents of other states with privacy laws can use the identical process and channels. For Nevada residents: we do not sell covered information as Nevada defines it, and you may still send an opt-out request, which we will record and honor.

Children

Pamperly is for adults. You must be 18 or older to have an account, to book or to take bookings, the site is not directed to children, and we do not knowingly collect personal information from anyone under 13 or open accounts for anyone under 18. If you believe a child has an account or that we hold a child's information, tell us at support@pamperly.us and we will delete it. An adult booking a service for a minor in their care does so on the adult's own account, as the Terms of Service describe.

Acknowledgments

When you accept a notice or terms (for example the booking notice or the provider acknowledgment), Pamperly records which version you accepted and when. That record is how we can show, later, exactly which words you agreed to.

Changes to this policy

The version date at the top says which policy is current. If we make a material change, such as a new category of data, a new recipient or a new use, we will tell you before it takes effect, by email to the address on your account or by a notice in the product, not just by editing this page. Minor clarifications may ship with only the date changing. Earlier versions are available from support on request.

Contact

Pamperly LLC operates the marketplace and is responsible for the personal information this policy describes. Reach us in the support chat on any page or at support@pamperly.us; both channels work for privacy requests. If you are writing about privacy, say so in your first line, so it reaches the right person and the clock starts. You can also write to Pamperly LLC, 4101 Dublin Blvd Ste F #2010, Dublin, California 94568, United States.