Privacy Policy

1. Introduction

BraidR ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, store and protect your data when you use our platform.

We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and Norwegian data protection laws.

2. Data controller

BraidR is the data controller for personal data collected through our services.

Contact us: privacy@braidr.no

3. Data we collect

Account information

• Name (first and last)
• Email address
• Phone number (optional)
• Profile photo (optional)
• City and approximate location

For stylists

• Service descriptions and prices
• Portfolio images
• Working hours and availability
• Work address

Usage data

• Booking history
• Messages between users
• Reviews and ratings
• Search history and preferences

4. Purpose of processing

• Deliver and improve our services
• Manage user accounts
• Process bookings and payments
• Send notifications and reminders
• Ensure platform safety
• Comply with legal obligations

5. Legal basis

We process personal data based on: consent (GDPR art. 6(1)(a)), contract performance (GDPR art. 6(1)(b)), legitimate interest (GDPR art. 6(1)(f)), and legal obligation (GDPR art. 6(1)(c)).

6. Data sharing

We share personal data only with:

• Other users (profile information with your consent)
• Supabase (database hosting, EU region)
• Vercel (hosting, EU region)
• Payment processors (Stripe and supported local processors, for payments)
• Email services (Resend, for transactional emails)

We never sell your personal data to third parties.

7. Your rights

Under GDPR you have the right to:

• Access your personal data
• Rectification of inaccurate data
• Erasure of your data ("right to be forgotten")
• Restriction of processing
• Data portability
• Object to processing
• Withdraw consent

To exercise your rights, contact us at privacy@braidr.no

8. Cookies

We use necessary cookies to ensure the platform functions correctly. We do not use tracking or advertising cookies without your explicit consent.

9. Data storage and security

Your data is stored on servers in the EU (Stockholm region). We use encryption, access control and regular security reviews to protect your data.

10. Complaints

If you believe we process your personal data in violation of GDPR, you have the right to file a complaint with the Norwegian Data Protection Authority (datatilsynet.no).

11. Contact

Questions about privacy? Contact us:

Email: privacy@braidr.no