Privacy Policy

1. Who is responsible

Artists and businesses (“studios”) use Tsoona to run their booking pages. For your booking details, the studio you book with decides how they’re used, and we process them on the studio’s behalf. For studio accounts, we are responsible for the account data.

2. What we collect

When you book: your name, email, phone number, the details and answers you give on the booking form, any reference photos you upload, your appointment times, payment status (card details are handled by Stripe, never by us), consent-form signatures, and the messages you exchange with the studio by email or text.

Studio accounts: name, email, business details, password (stored only as a secure hash), subscription status, and the content you add to your site.

Technical data: IP address and basic request logs, used for security and to prevent abuse. We use only the cookies needed to keep you signed in and keep forms secure — no advertising trackers.

3. How we use it

To provide the service: showing booking pages, sending booking confirmations, reminders and updates, keeping the conversation between you and the studio together, processing payments, keeping accounts secure, and answering support requests. We don’t sell personal information, and we don’t use it for advertising.

4. Text messages

If you tick “Text me about my booking”, we use your mobile number to send texts about your booking from the studio’s number, and we record when you agreed. You can reply STOP at any time to stop, or HELP for help (see the texting terms).

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent will not be shared with any third parties, except the text-message provider that delivers the messages on our behalf.

5. Who we share it with

The studio you book with sees your booking details and messages. If that studio is part of a shop (a group of artists on one plan), the shop’s owner can also see those booking details and messages, and add internal notes, to help run the shop — they can’t message you as the artist. We use a small set of service providers to run Tsoona, each only for its part of the service:

• Resend — sending and receiving email.
• Twilio — sending and receiving text messages.
• Stripe — subscription billing and client payments.
• Our hosting provider — running the servers that store the data.

We may also disclose information if the law requires it, or to protect the safety of people or the service.

6. How long we keep it

Booking records stay for as long as the studio keeps them in their account — an artist who leaves a shop keeps their records, and the shop owner loses access to them. Studios can export or permanently erase a client’s records at any time. When a studio account is deleted, its data is removed after a short period. Backups are kept for a limited time and then overwritten.

7. Security

Data is sent over encrypted connections, passwords are hashed, and access to studio data is limited to the studio’s own account. No system is perfectly secure, but we work to protect your information.

8. Your choices

You can ask the studio you booked with to correct or delete your information, or contact us and we’ll help. You can unsubscribe from a studio’s announcement emails with the link in each one, and stop texts by replying STOP. You’ll still get messages about bookings you make.

9. Children

Tsoona is not directed to children under 13, and we don’t knowingly collect their information.

10. Changes

We may update this policy; the date at the top shows the latest version, and material changes will be posted here.

11. Contact

Questions or requests: admin@tsoona.com (Tsoona).