Who we are
Hayven is provided by Nguyener Marketing LLC (“Hayven,” “we,” “us”). We make software for nail salons: online booking, a calendar and turn tracker for the front desk, client profiles, appointment texts and emails, and marketing tools such as bio pages, promotion pages, and campaign texts. Our team also sets up Hayven for salons and can run parts of their marketing for them.
This policy explains what information we handle, why, and the choices you have. It covers:
- our website, hayven.ai, including the demo request form;
- the Hayven app that salon owners and staff sign in to (app.hayven.ai);
- the booking, check-in, bio, and promotion pages we host for salons (for example, booking.hayven.ai/your-salon, clients.hayven.ai, and your-salon.hayven.salon); and
- the texts and emails we send for salons and for ourselves.
Two different roles
- For salon clients’ information, the salon is in charge. When you book with a salon that uses Hayven, the salon decides how your information is used, and we process it as the salon’s service provider. The salon’s own privacy policy also applies to you. For requests about your information, the salon is the best place to start, and we’ll help it respond.
- For everyone else, Hayven is responsible. That includes salon owners and staff who use the app and anyone who asks us for a demo.
Information we collect
From salon owners and their teams
- Account details: name, email address, mobile number, role, and sign-in information. Sign-in is handled by our authentication provider, Clerk.
- Salon details: business name, address, hours, services, prices, staff schedules, photos, logo, brand color, and the settings you choose.
- Connected accounts: if you connect Google Business Profile, Facebook, or Instagram, we store the access those services grant us (kept encrypted) and the information we need from them, such as your reviews or comments on your posts. See Facebook and Instagram data for details.
- Business registration details that US carriers require before a salon can send texts (A2P 10DLC registration), such as legal business name, tax ID, and a business contact.
- Support conversations with our team.
From salon clients, on behalf of salons
- Contact details: name, mobile number, and email address.
- Appointments: services, add-ons, technician, date and time, and group bookings. When someone books for a group, they may give us the names of the people they’re booking for.
- Client history the salon keeps: past visits, purchases, gift cards, and notes the salon writes, such as a favorite color or technician.
- Messages exchanged with the salon by text.
- Consent records: what you agreed to (for example, appointment texts or promotional texts), when, and how, plus any opt-outs.
From demo requests on hayven.ai
When you ask for a demo, we collect your name, salon name, mobile number, email (optional), city and state, current POS (optional), team size, and preferred language. We also record your consent to be contacted, the exact wording you agreed to, and the time, along with your IP address, browser type, the page you were on, the referring page, and any campaign tags in the link.
From salon marketing pages
Salons can publish bio and promotion pages with Hayven. When you fill in a form on one of those pages, the salon receives your name, mobile number, email (if asked), the offer you chose, and your consent choices. If the salon has connected a Meta (Facebook) Pixel, see Cookies and similar technologies.
Collected automatically
Our servers record basic technical information when you use our pages: IP address, browser and device type, pages visited, the referring page, and the time. We use it to run, secure, and fix the service. hayven.ai does not use advertising or analytics cookies.
How we use information
- To run Hayven: take bookings, keep salon calendars and turn lists, and send the confirmations, reminders, and other messages salons set up.
- To set up and support salons. With the salon’s permission, our team signs in to its account to configure services, pages, and messages, and to help when something isn’t working.
- To deliver marketing services a salon asks us for, such as building its pages or campaigns. We use that salon’s information only for that salon.
- To follow up on demo requests, by phone, text, or email, in the language you chose.
- To keep Hayven safe: prevent spam and abuse on public forms (including bot checks and rate limits), protect accounts, and investigate problems.
- To improve Hayven, using usage patterns and aggregated information that doesn’t identify any salon client.
- To tell salon owners about their account and about Hayven updates. You can opt out of non-essential updates at any time.
- To comply with the law and enforce our Terms of Service.
We never use a salon’s client information to market Hayven, or to help any other salon.
Writing help (AI). If a salon uses the “Rewrite with AI” button while editing its marketing pages, the text the salon wrote is sent to Google’s Gemini service to suggest new wording. Client records are never sent to it.
Text messages (SMS)
Texts we send for salons
When a salon uses Hayven, we send texts from the salon’s own number and in its name. Depending on the salon’s settings, these can include appointment confirmations, reminders, and changes; check-in and “your technician is ready” updates; a request for a review after a visit; replies in a conversation with the salon; and, only if you agreed to them, promotional texts from the salon. The salon is responsible for collecting any permission the law requires before texting you. Salon staff may also get texts about their own appointments if their salon turns this on.
Texts we send for Hayven
If you request a demo and agree to be contacted, we’ll call or text you about your demo. If you’re a salon owner, our team may also call or text you about your account and support.
Your choices and our commitments
- Message frequency varies. Msg & data rates may apply.
- Reply STOP to any text to stop getting texts from that number. Reply HELP for help, or contact us at (866) 970-6888.
- Consent to texts is never a condition of buying anything.
- Carriers are not liable for delayed or undelivered messages.
- We do not sell, rent, or share mobile numbers or SMS opt-in consent with third parties or affiliates for their marketing purposes. Mobile information is shared only with the service providers that deliver our messages (such as Twilio), and only to deliver them. Text messaging opt-in data and consent are excluded from every other kind of sharing described in this policy and will not be shared with any third parties.
Facebook and Instagram data
This section covers Comment → DM, a feature that lets a salon automatically reply to people who comment a keyword (for example “ME”) on the salon’s own Facebook or Instagram posts.
What we receive
When a salon connects its Facebook Page and linked Instagram business account to Hayven, we receive, through Meta’s APIs and only for that Page and account:
- the Page’s and Instagram account’s id, name, username, and profile picture;
- the salon’s posts (caption, image, and link); and
- comments on the posts the salon chooses for an automation.
How we use it
When a comment contains the salon’s keyword, Hayven posts one of the salon’s public replies under it (and, if the salon turns this on, likes the comment on Facebook). Hayven then sends the commenter one private reply, using Meta’s Private Replies feature, with the salon’s message and link buttons (for example, “Book now”). We never message anyone who didn’t comment the keyword, and we send at most one private reply per person for each automation.
For each matching comment, we store the commenter’s Meta-scoped id, public name or username, and the comment text in the salon’s activity log, so the salon can see what was sent. We use this data only to post the salon’s public reply, send the one private reply the salon set up, and show the salon its results. We don’t sell it, use it for advertising, or add commenters to the salon’s contacts. A commenter becomes a contact only if they tap a button and fill in the salon’s form themselves.
How long we keep it
Commenter names and comment text are deleted automatically 180 days after the comment. Access tokens are stored encrypted, and are deleted when the salon disconnects.
Your choices and deletion
- Salons can pause or archive an automation, or disconnect Facebook and Instagram, at any time in Hayven.
- Anyone who connected Hayven with Facebook can remove Hayven in Facebook › Settings › Business integrations. We then stop all activity for the Pages they connected. They can also ask Facebook to delete their data from Hayven. We then delete the connection and its access tokens, and Facebook shows a confirmation code.
- Commenters can ask the salon, or email us at support@hayven.ai, to delete their comment data sooner.
How we share information
We don’t sell personal information, and Hayven doesn’t share it for its own advertising. We share information only in these cases:
- With the salon. Your booking, form, and message details go to the salon you’re dealing with.
- With service providers that run parts of Hayven for us, listed below. They may use the information only to provide their service to us.
- With services a salon connects, at the salon’s direction, such as Google Business Profile or Meta.
- For legal reasons, when required by law or to protect the rights, safety, and property of Hayven, salons, their clients, or others.
- In a business transfer, such as a merger or sale of the company, where this policy continues to protect the information.
- With your permission, in any other case.
Service providers
These companies process information for us. We list only services Hayven actually uses.
| Provider | What they do for Hayven | Information involved |
|---|---|---|
| Supabase | Database hosting and live updates in the app | Information stored in Hayven |
| Railway | Hosting for Hayven’s servers | Information processed by Hayven |
| Vercel | Hosting for our websites and web app | Page requests (IP address, browser) |
| Clerk | Sign-in and account security for salon owners and staff | Name, email, phone, sign-in activity |
| Cloudflare | File storage (photos, logos) and bot protection on forms (Turnstile) | Uploaded files; browser signals when a form is sent |
| Twilio | Text messages, salon phone numbers, and carrier registration | Phone numbers, message content, salon business details |
| Resend | Email delivery | Email addresses and email content |
| Inngest | Scheduled and background tasks, such as reminders | Details needed to run each task |
| Gemini (AI writing help), Google Business Profile and Places (reviews and business listings) | Marketing text a salon wrote; the salon’s public business listing and reviews | |
| Meta | Facebook and Instagram features a salon turns on (ad conversion reporting, replies to comments and messages) | Contact details scrambled (hashed) before sending, plus IP address, browser details, and Meta’s click identifiers; comments and messages on the salon’s pages |
Cookies and similar technologies
- hayven.ai uses no advertising or analytics cookies. Your browser’s storage remembers small things, such as an announcement you closed, and helps prevent a demo request from being sent twice. Cloudflare Turnstile checks that a demo request comes from a person, and it may use cookies or similar technology to do that.
- The Hayven app uses the cookies it needs to keep you signed in.
- Salon marketing pages may use a Meta Pixel if the salon turns one on. The Pixel lets Meta record visits and actions on that page so the salon can measure its ads, under the salon’s choice and Meta’s own policies. When a salon uses this feature, we also report bookings and sign-ups to Meta directly from our servers, with contact details scrambled (hashed) first, along with the visitor’s IP address, browser details, and Meta’s click identifiers. You can manage ad preferences in your Facebook or Instagram settings.
hayven.ai itself sets no advertising cookies and sends nothing to ad platforms, so there’s nothing to opt out of there.
How long we keep information
- Salon accounts and salon client information: while the salon’s account is active. After a salon cancels, we keep its information for a limited time so the salon can return or ask for a copy, then delete it or remove what identifies people, unless the law requires us to keep it longer.
- Demo requests: as long as we need them to follow up and keep business records.
- Consent and opt-out records: as long as we may need them to show that a message was allowed, including after an account closes.
- Server logs and backups are overwritten on a rolling schedule.
How we protect information
- All traffic to Hayven uses encrypted connections (HTTPS).
- Salon owners control what each staff member can see and do.
- Keys for connected services (such as Google, Meta, and Twilio) are stored encrypted.
- Public forms are protected by bot checks and rate limits.
No system is perfectly secure. If a breach affects your information, we’ll notify affected salons and people as the law requires.
Your privacy rights
Wherever you live, you can ask us to:
- tell you what information we have about you and give you a copy;
- correct information that’s wrong;
- delete your information; and
- stop marketing texts or emails (reply STOP to a text, or use the unsubscribe link in an email).
If you’re a salon client, your information is controlled by the salon. We’ll forward your request to the salon, or help the salon respond. Some information may be kept where the law requires it, such as records of consent.
California residents
The California Consumer Privacy Act (as amended by the CPRA) gives California residents the rights above, plus the right to know how we collect, use, and disclose personal information, and the right not to be treated differently for using these rights.
- Categories we collect: identifiers (name, phone, email, IP address); customer records (appointments, purchases, notes); commercial information (services booked); internet activity (pages visited on our sites); approximate location from IP address; and professional information about salons and their teams. The sources and purposes are described above.
- Sensitive information: account sign-in details (handled by Clerk) are used only to provide the service, never to infer anything about you.
- Sale and sharing: Hayven has not sold personal information in the past 12 months, and doesn’t share it for its own advertising. When a salon turns on Meta ad measurement for its own marketing pages, visit and sign-up information from those pages goes to Meta at the salon’s direction, and the salon’s privacy choices apply. We don’t knowingly sell or share information about anyone under 16.
Residents of other states with privacy laws, such as Colorado, Connecticut, Oregon, Texas, and Virginia, have similar rights, and we honor them the same way.
How to make a request
Email support@hayven.ai or call or text (866) 970-6888. We’ll confirm your identity before acting, usually by checking details we already have. You can use an authorized agent, and we may ask for proof that you gave them permission. We respond within 45 days. If we turn down your request, you can ask us to reconsider by replying to our answer.
Children
Hayven is a service for businesses and isn’t directed to children under 13. We don’t knowingly collect information from children under 13. A salon may keep an appointment for a child when a parent or guardian books it, and that information is handled like any other salon client information. If you believe a child has given us information directly, contact us and we’ll delete it.
Users outside the United States
Hayven is built for salons in the United States, and we process information in the United States. If you use Hayven from another country, your information will be transferred to and processed in the United States.
Changes to this policy
When we change this policy, we’ll update the “Last updated” date at the top. If a change is significant, we’ll also tell salon owners by email or in the app before it takes effect.
Contact us
Nguyener Marketing LLC
408 Anthony Road
King of Prussia, PA 19406
Email: support@hayven.ai
Call or text: (866) 970-6888