Privacy Policy

Who we are

Salon Ads Studio builds and runs Google Ads for hair salons, barbershops and chair renters. This website is at salonadsstudio.com and the application lives at app.salonadsstudio.com.

Salon Ads Studio is operated by The SaaS Ads Studio Limited (Company No. 16972448), a private limited company registered in England. We are committed to protecting and respecting your privacy.

What this website collects

Very little. The assessment and the free budget calculator run entirely in your browser: what you type into them is used to show you estimates on the page and is not sent to us, stored, or shared. Reloading the page clears it.

This website currently sets no analytics or advertising cookies. If we add privacy-respecting analytics or advertising pixels later, this policy will be updated first and any consent requirements honoured.

Our hosting provider (AWS Amplify) keeps standard server logs for security and operations: your IP address, browser type and the pages requested. They are kept briefly and are not used to profile you.

What the application collects (when you sign up)

When you create an account at app.salonadsstudio.com and connect your Google account, we request access to:

Your email address and basic profile information (for signing you in)
Your Google Ads account, so we can build and manage campaigns on your behalf
Your Google Business Profile, so we can read your listing and put right the few things on it that we are able to fix for you

Both are asked for on one Google screen, because we would rather ask you once than twice. Google lets you untick either one. If you leave the listing permission off, the rest still works: we show you what is wrong with your listing instead of fixing it.

How we handle Google user data

Salon Ads Studio's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In plain terms:

What we access, for your ads. The Google Ads scope (https://www.googleapis.com/auth/adwords). Through it we read your campaigns, ad groups, keywords, search terms, conversion actions and performance figures, and we make the changes you have approved.
What we access, for your listing. The Business Profile scope (https://www.googleapis.com/auth/business.manage). We read your listing: its name, address, phone number, categories, opening hours, website or booking link, services and description, and whether Google has verified it. We write back only four of those, and only ones we have shown you first: your booking link, your phone number, your description and your services list. We never change your name, your address, your categories, your opening hours or your photos, and we never delete a photo or a review.
How we use it. Only to provide features you can see in the application: building and adjusting your campaigns, writing and testing your ads, maintaining your negative keyword lists, moving budget within the limit you set, fixing your listing, and producing your dashboard and monthly summary. About once a month we look at your listing again and put back anything we fixed that has come undone since. We do not touch anything else on it. Nothing else.
How we store it. In our database with Supabase. Your Google access and refresh tokens are encrypted at rest and are never sent to your browser. Cached performance data is short-lived and refreshed from Google. For your listing we also keep a copy of the handful of fields we change, exactly as they were before we touched them, so that any change we make can be put back.
How we share it. We never sell, rent or trade it. It goes only to the processors listed under "Service providers" below, and only ever to deliver a feature in the application.
We never use it to advertise to you. Your Google Ads data exists to run your campaigns. It is never used to target advertising at you, or to build an advertising or marketing profile of you.
We do not use it to train AI models. We send account data to Anthropic's Claude API so it can analyse performance and recommend optimisations. Anthropic does not use data submitted through their API to train their models.
Human access is limited. Someone at Salon Ads Studio sees your Google data only when you ask us for help and we need it to answer, when your plan includes human review of your account, when we are investigating a security or abuse problem, or when the law requires it.

Revoking access

You can disconnect your Google account at any time from the application or from your Google account's security settings. When you disconnect, we no longer have any access to your Google Ads account or to your Business Profile. Everything stays yours: your campaigns, your negative keyword lists, your ads, and the corrections we made to your listing.

Your clients' information

Two features involve information about the people who book with you, rather than about you. In both, your clients' details are yours, and we handle them only to run the feature.

Enquiries from your page. When someone fills in the callback form on your landing page, we store the name, phone number and message they typed, email them straight to you, and show them in your dashboard, so that you can ring them back. We never contact them ourselves.
Booking counting (optional, and off unless you set it up). If you choose to send your booking system's notification emails to the private address we give you, we read each email once and keep only the non-personal facts: that a booking happened, the treatment, the time and the price. Your clients' names and contact details are never stored in our database. The emails themselves are received by our email provider, Resend, and held there under their retention policy until it expires them.

We never sell or share your clients' details, and we never use them to advertise to anyone. Reading a booking email involves sending its text to Anthropic's Claude API to pick out those facts. Anthropic does not use data submitted through their API to train their models.

Payment information

Subscriptions are processed by Stripe. We never see or store your card details; we store only a customer ID and subscription ID to manage your subscription status. See Stripe's privacy policy for how they handle payment data.

Service providers

Your data is shared only with the providers needed to run the service, each contractually bound to protect it:

Amazon Web Services: hosting for this website
Supabase: the application's database, sign-in and server functions. Your account details, campaign settings and cached Google Ads figures are stored here
Anthropic: the Claude AI models that analyse your account and draft the optimisations we recommend
Stripe: payment processing
Resend: service and product email: your monthly report, your enquiry alerts, and the account emails. If you switch on booking counting, your booking system's notification emails are received here too
Sentry: error monitoring, so we can find and fix faults in the application
Google: the Google Ads API and the Business Profile API you explicitly connect, and Google Analytics inside the application
Slack and IPWhois: an internal alert when someone signs up, including approximate location worked out from IP address

We may also disclose data when required by law or to protect our legal rights.

Data retention

Application account data is retained while your account is active and for 3 months after cancellation (so you can reactivate), after which it may be permanently deleted. You can request earlier deletion at any time.

Enquiries from your landing page follow the same rule, so you keep a record of who asked you to call for as long as you have an account. Booking counts are kept as figures only, with nothing in them that identifies a client.

Your rights

Under UK GDPR you have the right to access, correct, export, restrict, or delete the personal data we hold about you, and to object to its processing. To exercise any of these rights, email hello@salonadsstudio.com. You also have the right to complain to the Information Commissioner's Office (ICO).

Changes to this policy

When we make changes, we update the "Last updated" date at the top of this page. Material changes to how the application handles your data will be notified by email.

Contact

Questions about this policy or your data: hello@salonadsstudio.com

Company: The SaaS Ads Studio Limited (Company No. 16972448), registered in England.