Privacy Policy

Trimmly ("Trimmly", "we", "us") provides point-of-sale, staff, and reporting software for barbershops and salons in Australia, through our mobile app and this website (together, the "Service"). This policy explains what personal information we collect from salon owners, managers, and staff ("you"), and from their clients where that information passes through the Service, and how we handle it under the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

We collect the following categories of information as you use the Service:

• Account information — your name, email address, password (stored as a salted hash, never in plain text), role (owner, manager, or barber), and optional profile photo.
• Business information — your salon's name, timezone, and logo.
• Transaction records — sales, line items, prices, and payment method (cash or card) recorded through the point-of-sale. We do not collect or store your clients' card numbers — card payments are handled by your own card terminal outside the Service.
• Shift and attendance records — clock-in/clock-out times and breaks logged by staff.
• Billing information — your subscription status, seat count, and invoice history. Card details you enter to pay for a Trimmly subscription go directly to Stripe (see below); we never see or store them.
• Usage and diagnostic information — app and website interactions, device/browser type, and error reports, collected via PostHog (see below) to help us fix bugs and improve the Service.

We use the information above to:

• Provide the Service — running sales, managing staff and shifts, and generating reports.
• Process subscription payments and manage your billing status.
• Maintain the security of accounts, including detecting and preventing unauthorised access.
• Diagnose bugs, monitor reliability, and improve the Service.
• Communicate with you about your account, billing, or changes to the Service.

We don't sell your information. We share it only with the service providers that run Trimmly:

• Stripe, Inc. — processes subscription payments and stores payment methods and invoices on our behalf. Stripe may process this information outside Australia, including in the United States, under its own privacy policy.
• PostHog — provides product analytics and error tracking. PostHog may process this information outside Australia under its own privacy policy.
• Our hosting and database providers — store your account and business data. Our primary database is hosted in Sydney, Australia.

We may also disclose information if required by law, or to protect the rights, property, or safety of Trimmly, our users, or others.

Passwords are stored as salted hashes and never in plain text. Traffic between the app, the website, and our servers is encrypted with HTTPS/TLS. Access to production data is restricted to what's needed to operate and support the Service. No method of storage or transmission is perfectly secure, but we take reasonable steps to protect your information.

We retain your information for as long as your account is active, so the Service can function (for example, keeping sales history for reporting). If you close your subscription, your account data is retained but the Service moves into read-only mode.

You can permanently delete your salon account at any time from Account settings in the app. This immediately and irreversibly deletes your salon, all staff logins, and every sale, shift, and report associated with it, and cancels any active subscription. This cannot be undone.

Under the Australian Privacy Principles, you can ask us to access or correct the personal information we hold about you, or ask us to delete it (see above for how to do this yourself for a whole salon account). To make a request, or if you have a privacy complaint, contact us at reach@corexlab.com. We'll respond within a reasonable time.

Our website uses a small number of essential cookies to keep you signed in — these are required for the site to work and aren't used for advertising. PostHog may also set cookies or similar identifiers on the website and in the app to distinguish users for analytics purposes.

The Service is intended for business use by salon owners, managers, and staff, and isn't directed at children. We don't knowingly collect personal information from children.

We may update this policy from time to time. If we make material changes, we'll update the date at the top of this page and, where appropriate, notify you directly.

Questions about this policy or how we handle your information? Email reach@corexlab.com.