1. Introduction
TJ Balsamo (sole proprietor, DBA Mr. Freshcut) (“Company,” “we,” “our,” “us”) operates the Freshcut app (the “Platform”) at mrfreshcut.com. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights.
By using the Platform, you agree to this Privacy Policy. If you do not agree, do not use the Platform.
2. Information We Collect
You provide directly:- Name, phone number, email address, optional birthday, profile photo
- Payment information (card details are processed and stored by Stripe; we never store your full card number)
- For Pros: government-issued ID, professional license number, HIV/AIDS certificate, Social Security number (last 4) or EIN, bank routing/account number (all collected via Stripe Connect — we don't see them directly)
- Booking details, notes, preferences, communications you send to us
- Reviews and ratings you submit
Collected automatically:- Device type, browser, operating system, IP address
- Pages visited, features used, time spent
- Approximate location (city/state) inferred from IP
- Cookies and similar technologies (see Section 6)
From third parties:- Stripe sends us payment success/failure events and account verification status
- Twilio sends us SMS delivery status and inbound STOP/HELP keywords
- Daily.co (video provider) sends us call duration and connection metadata for video consultations you book
- For Pros: Florida DBPR public license records
For imported clients: If your Pro imported your contact information from a prior system (e.g., Square), we hold that information solely to facilitate your relationship with that Pro on the Platform. You can request deletion at any time (see Section 9).
3. How We Use Your Information
- To create and manage your account
- To process bookings, payments, refunds, and fee enforcement
- To send transactional messages (OTP codes, booking confirmations, reminders, fee notices)
- To send promotional messages where permitted by law (with opt-out)
- To facilitate video consultations
- To improve the Platform and develop new features
- To detect and prevent fraud, abuse, and unauthorized access
- To comply with legal obligations and enforce our Terms
- To respond to your support requests
4. Who We Share Your Information With
We do not sell your personal information.
We share information with:
- Pros you book with — your name, phone number, booking history with that Pro, and any notes you provide. Pros only see clients in their own network (clients who have booked them, have a membership, redeemed a perk, or were imported by them).
- Service providers who help us operate the Platform: Stripe (payments + payouts), Twilio (SMS + verification), Resend / SendGrid (email), Daily.co (video), Supabase (database + authentication hosting), Vercel (web hosting), Cloudflare (DNS + email forwarding).
- Legal compliance — when required by law, court order, or to protect rights, property, or safety.
- Business transfers — if we are acquired or merge with another company, your information may transfer.
- With your consent — for any other purpose disclosed at the time of collection.
5. Communications: SMS & Email
By providing your phone number and/or email address, you consent to receive both transactional and promotional communications. Transactional examples include login codes, booking confirmations, reminders, fee notices, and service updates. Promotional examples include offers and platform news.
SMS: Message and data rates may apply. Reply STOP to unsubscribe from promotional SMS at any time. Reply HELP for help. Transactional messages necessary for an active appointment may continue.
Email: Click the unsubscribe link in any promotional email or email info@mrfreshcut.com. Transactional emails necessary for your account may continue.
6. Cookies & Similar Technologies
We use cookies and similar technologies to:
- Keep you signed in
- Remember your preferences
- Measure how the Platform is used
- Improve performance
You can control cookies through your browser settings. Disabling cookies may break features such as authentication.
7. Data Retention
We retain your personal information for as long as your account is active, and afterward as required for:
- Tax, accounting, and financial record-keeping (7 years)
- Legal compliance and dispute resolution
- Fraud prevention and platform safety (up to 5 years)
- Backup and disaster recovery (up to 90 days after deletion)
You can request deletion at any time, subject to these retention obligations.
8. Security
We implement industry-standard administrative, physical, and technical safeguards including encryption in transit (HTTPS/TLS), encryption at rest, access controls, and regular security reviews. No internet transmission is 100% secure. You are responsible for keeping your login phone secure.
9. Your Rights
Subject to applicable law, you may have the following rights:
- Access: request a copy of the information we hold about you
- Correction: ask us to correct inaccurate information
- Deletion: ask us to delete your information (subject to retention obligations in Section 7)
- Portability: request a machine-readable copy of your information
- Opt-out: stop promotional communications at any time
- Object / Restrict: ask us to limit how we use your information
To exercise any of these rights, email info@mrfreshcut.com. We will respond within 30 days.
10. California Residents (CCPA / CPRA)
California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to delete it, the right to correct it, the right to limit use of sensitive personal information, and the right to non-discrimination for exercising these rights.
We do not sell or share your personal information for cross-context behavioral advertising. To exercise your rights, email info@mrfreshcut.com. You may also designate an authorized agent.
11. Other State Privacy Laws (Virginia, Colorado, Connecticut, Utah, Texas, etc.)
Residents of states with comprehensive privacy laws have rights similar to those described in Sections 9 and 10. Email info@mrfreshcut.com to exercise them.
12. Children
The Platform is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with information, email info@mrfreshcut.com and we will delete it.
13. International Users
The Platform is operated from the United States. If you access the Platform from outside the U.S., your information will be transferred to and processed in the U.S. By using the Platform, you consent to this transfer.
14. Changes to This Policy
We may update this Privacy Policy at any time. Material changes will be communicated via email or in-app notice. The “Effective” date at the top reflects the current version. Continued use after the effective date constitutes acceptance.