Privacy Policy

Last updated: September 2026

Placeholder document. This is a starter Privacy Policy written to accurately describe how the product currently handles data, not a legally reviewed policy. It has not been reviewed by a lawyer and should be before it's relied on as a binding legal document.

1. Overview

This policy explains what information NailShutter collects, how it's used, and — since this involves people's photos — what specifically happens to them.

2. Information salon owners provide

When you create a NailShutter account, we collect:

Your salon name, email address, and password (handled by our authentication provider, Supabase).
Design photos, prices, and categories you upload.
Optional branding details: logo, brand color, font, and your booking link.

This information is used to operate your dashboard and to power your public widget. It's stored with our hosting provider (Supabase) and isn't sold to anyone.

3. Customer try-on photos — the important part

When someone uses the AI try-on feature on your widget, they upload a photo of their hand. That photo is:

Held in memory only for the duration of that single request.
Sent to our AI processing provider (Google's Gemini API) solely to generate the preview image the customer requested.
Never written to our database or file storage, never shown to the salon owner, and never shared publicly or with any other third party.

Once the preview is generated and returned to the customer's browser, we retain no copy of the uploaded photo on our servers. The generated preview image itself also isn't stored by us — it exists only in the customer's browser for that session, unless they choose to save it themselves.

4. Cookies

We use a small number of cookies required to keep salon owners logged in to their dashboard. We don't use advertising or tracking cookies on the widget itself.

5. Third parties we use

We rely on a small number of infrastructure providers to run the Service:

Supabase — hosting, authentication, database, and file storage.
Google (Gemini API) — generates the AI try-on preview images, as described above.
Vercel — hosts the website and application.

Each handles data under its own privacy and security practices as our infrastructure providers.

6. Data retention and deletion

Salon owners can delete individual designs or their entire account at any time from the dashboard. Customer try-on photos are never retained in the first place, so there's nothing to delete on that front.

7. Security

We use industry-standard practices (encrypted connections, access-controlled storage) to protect the data we do store. No system is perfectly secure, and we can't guarantee absolute security.

8. Children's privacy

The Service is intended for salon owners and their adult customers, and isn't directed at children.

9. Changes to this policy

If we make material changes to how we handle data, we'll update this page and take reasonable steps to let salon owners know.

10. Contact

Questions about this policy or your data? Email us at info@nailshutter.com.