Privacy Policy

Who we are

Salon Ads Studio builds and runs Google Ads for hair salons, barbershops and chair renters. This website is at salonadsstudio.com and the application lives at app.salonadsstudio.com.

Salon Ads Studio is operated by The SaaS Ads Studio Limited (Company No. 16972448), a private limited company registered in England. We are committed to protecting and respecting your privacy.

What this website collects

Very little. The assessment and the free budget calculator run entirely in your browser: what you type into them is used to show you estimates on the page and is not sent to us, stored, or shared. Reloading the page clears it.

This website currently sets no analytics or advertising cookies. If we add privacy-respecting analytics or advertising pixels later, this policy will be updated first and any consent requirements honoured.

Our hosting provider (AWS Amplify) keeps standard server logs — IP address, browser type, pages requested — for security and operations, retained briefly and not used to profile you.

What the application collects (when you sign up)

When you create an account at app.salonadsstudio.com and connect your Google account, we request access to:

Your email address and basic profile information (for signing you in)
Your Google Ads account, so we can build and manage campaigns on your behalf

Today the application requests Google Ads access only. Correcting your Google Business Profile (category, services, hours, booking link) is on our roadmap. If we add it, we will ask for that access separately and update this policy first.

How we handle Google user data

Salon Ads Studio's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In plain terms:

What we access. A single Google Ads scope (https://www.googleapis.com/auth/adwords). Through it we read your campaigns, ad groups, keywords, search terms, conversion actions and performance figures, and we make the changes you have approved.
How we use it. Only to provide features you can see in the application: building and adjusting your campaigns, writing and testing your ads, maintaining your negative keyword lists, moving budget within the limit you set, and producing your dashboard and monthly summary. Nothing else.
How we store it. In our database with Supabase. Your Google access and refresh tokens are encrypted at rest and are never sent to your browser. Cached performance data is short-lived and refreshed from Google.
How we share it. We never sell, rent or trade it. It goes only to the processors listed under "Service providers" below, and only ever to deliver a feature in the application.
We never use it to advertise to you. Your Google Ads data exists to run your campaigns. It is never used to target advertising at you, or to build an advertising or marketing profile of you.
We do not use it to train AI models. We send account data to Anthropic's Claude API so it can analyse performance and recommend optimisations. Anthropic does not use data submitted through their API to train their models.
Human access is limited. Someone at Salon Ads Studio sees your Google data only when you ask us for help and we need it to answer, when your plan includes human review of your account, when we are investigating a security or abuse problem, or when the law requires it.

Revoking access

You can disconnect your Google account at any time from the application or from your Google account's security settings. When you disconnect, we no longer have any access to your Google Ads account. Everything built in your account — campaigns, the negative keyword lists, your ads — stays yours.

Your clients' information

Two features involve information about the people who book with you, rather than about you. In both, your clients' details are yours, and we handle them only to run the feature.

Enquiries from your page. When someone fills in the callback form on your landing page, we store the name, phone number and message they typed, email them straight to you, and show them in your dashboard, so that you can ring them back. We never contact them ourselves.
Booking counting (optional, and off unless you set it up). If you choose to send your booking system's notification emails to the private address we give you, we read each email once and keep only the non-personal facts: that a booking happened, the treatment, the time and the price. Your clients' names and contact details are never stored in our database. The emails themselves are received by our email provider, Resend, and held there under their retention policy until it expires them.

We never sell or share your clients' details, and we never use them to advertise to anyone. Reading a booking email involves sending its text to Anthropic's Claude API to pick out those facts. Anthropic does not use data submitted through their API to train their models.

Payment information

Subscriptions are processed by Stripe. We never see or store your card details; we store only a customer ID and subscription ID to manage your subscription status. See Stripe's privacy policy for how they handle payment data.

Service providers

Your data is shared only with the providers needed to run the service, each contractually bound to protect it:

Amazon Web Services — hosting for this website
Supabase — the application's database, sign-in and server functions. Your account details, campaign settings and cached Google Ads figures are stored here
Anthropic — the Claude AI models that analyse your account and draft the optimisations we recommend
Stripe — payment processing
Resend — service and product email: your monthly report, your enquiry alerts, and the account emails. If you switch on booking counting, your booking system's notification emails are received here too
Sentry — error monitoring, so we can find and fix faults in the application
Google — the Google Ads API you explicitly connect, and Google Analytics inside the application
Slack and IPWhois — an internal alert when someone signs up, including approximate location worked out from IP address

We may also disclose data when required by law or to protect our legal rights.

Data retention

Application account data is retained while your account is active and for 3 months after cancellation (so you can reactivate), after which it may be permanently deleted. You can request earlier deletion at any time.

Enquiries from your landing page follow the same rule, so you keep a record of who asked you to call for as long as you have an account. Booking counts are kept as figures only, with nothing in them that identifies a client.

Your rights

Under UK GDPR you have the right to access, correct, export, restrict, or delete the personal data we hold about you, and to object to its processing. To exercise any of these rights, email hello@salonadsstudio.com. You also have the right to complain to the Information Commissioner's Office (ICO).

Changes to this policy

When we make changes, we update the "Last updated" date at the top of this page. Material changes to how the application handles your data will be notified by email.

Contact

Questions about this policy or your data: hello@salonadsstudio.com

Company: The SaaS Ads Studio Limited (Company No. 16972448), registered in England.