Privacy Policy

This policy explains how the current version of The Shade Library handles information. It describes the service as it operates today and may be updated as the product develops.

1. Information You Provide

The service may store information that you choose to provide, including:

• Your name, email address and optional salon name
• Client records such as names, hair profiles, allergy and patch-test notes, colour formulas, appointment history and general notes
• Custom colour and shade information that you enter
• Subscription details such as billing status, renewal dates and provider reference numbers

Password authentication is handled by Supabase. Payment-card details are handled by Lemon Squeezy and are not stored in The Shade Library database.

2. Technical Information

The service and its providers may process technical information needed to operate and protect the platform, such as IP addresses, browser and device information, request logs, authentication events and error or security reports.

The current service does not use advertising cookies or a separate behavioural analytics platform.

3. How Information Is Used

Information is used to:

• Create, authenticate and maintain your account
• Provide shade-search, comparison and client-record features
• Save and display the information you enter
• Manage trial and subscription access
• Send essential account, authentication and billing messages
• Secure, maintain and troubleshoot the service

The Shade Library does not sell personal information and does not use client records for advertising.

4. Client Information

You decide what client information to enter. You are responsible for having an appropriate reason and any permission required to store that information, and for avoiding unnecessary personal or sensitive data.

Client records are intended to be available only within the account that created them. They may be processed where necessary to operate, secure or troubleshoot the service, or where required by law.

5. Service Providers

The current service relies on:

• Supabase for authentication and database services
• Vercel for hosting, deployment and operational logs
• Lemon Squeezy for checkout, payments and subscription management
• Google Fonts for font delivery on some pages

These providers process information under their own terms and may use infrastructure in different countries.

6. Security

The service uses reasonable technical safeguards, including encrypted connections, authenticated access and database access controls. No online system can be guaranteed to be completely secure or continuously available.

7. Retention, Export and Deletion

Account and client information may be retained while the account exists and for as long as it is reasonably needed to operate, secure and administer the service. Cancelling a subscription does not automatically delete the account or its records.

The current service does not provide a self-service account deletion or data-export tool. This policy will be updated when those processes are introduced.

8. Cookies

Essential cookies are used for authentication, session management and security. The current service does not use advertising or tracking cookies.

9. Changes to This Policy

This policy may be updated when the service, its providers or its data practices change. The updated date shown on this page identifies the current version.