Legal

Privacy Policy

Last updated: June 2, 2026

1. Overview

FadeKick is a product of Opynbox LLC (“Opynbox,” “FadeKick,” “we,” “us,” or “our”). FadeKick provides booking and business-management software for barbershops, salons, and grooming businesses, including an AI text-booking assistant. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.

Our two roles. When you create a FadeKick account, we act as a data controller for your account and business information. When a shop uses FadeKick to manage its own customers (clients, appointments, and conversations), the shop is the controller of that customer data and FadeKick acts as a processoron the shop’s behalf. If you are a client of a shop, please also contact that shop with privacy requests.

2. Information We Collect

We collect the following categories of information, most of which is stored in our Supabase Postgres database and scoped to a single business with row-level security:

Account & business information

AccountName, email address, and password (handled by our authentication provider), and profile photo.
Signup & contactIf you start creating an account, request information, or otherwise interact with us, we may collect contact details such as your name, email address, and phone number — including if you do not finish creating an account.
BusinessShop name, type, slug, address, phone number, branding (logo, colors), operating hours, and time zone.
TeamStaff names, emails, phone numbers, roles, and working schedules.

Customer & operational data (entered by shops)

ClientsFirst and last name, email, phone number, notes, and visit/no-show counts.
AppointmentsService, staff, start/end times, status, and appointment notes.
ServicesService names, durations, and prices.
ReviewsRatings and comments associated with a client or appointment.
PaymentsTransaction amount and status. Card details are handled by our payment processor and are not stored by FadeKick.
NotificationsIn-app activity such as new bookings, cancellations, and no-shows.

AI text-booking & SMS conversations

MessagesThe content of SMS messages exchanged with a shop's booking number and the AI assistant's replies.
Conversation metadataChannel, message counts, status, and a one-way hashed identifier of the customer's phone number.
Consent eventsA record of opt-in and opt-out (STOP/START) events for messaging compliance.
UsageAggregate monthly conversation and message counts per business.

Information collected automatically

When you use the product we and our infrastructure providers may collect technical data such as IP address, device and browser type, log and diagnostic data, and essential cookies/session tokens used to keep you signed in. We do not log message bodies in our application logs in production; phone numbers in logs are hashed.

3. How We Use Information

We use the information described above to:

  • Provide, operate, and secure the booking and management platform.
  • Power the AI text-booking assistant — reading availability, booking and confirming appointments, and answering questions.
  • Send transactional communications such as booking confirmations and account emails.
  • Send product updates, onboarding tips, and other marketing email about FadeKick where permitted by law. You can unsubscribe from marketing email at any time using the link in those messages or by contacting us. We do not use phone numbers collected during signup for SMS marketing unless you separately opt in.
  • Process payments and protect against no-shows (where enabled).
  • Provide analytics and reporting to shop owners about their own business.
  • Maintain security, prevent abuse, debug issues, and comply with legal obligations.

We do not sell your personal information, and we do not use shop customer data for advertising.

4. AI Text Booking & SMS

FadeKick’s AI assistant replies to text messages sent to a shop’s booking number. By texting that number, a customer agrees to receive automated replies to help book appointments. Message and data rates may apply, and customers can reply STOP at any time to opt out or START to opt back in. We log these consent events for compliance with applicable messaging laws (including the TCPA).

To generate replies, message content and a limited window of recent conversation turns are sent to our AI provider (OpenAI). We do not send your full message history, and we use API settings intended to exclude your content from training the provider’s models. Message bodies are retained for 90 days, while conversation metadata and consent records are retained for up to one year (consent records may be kept longer where required by law).

5. How We Share Information

We share information with service providers (subprocessors) that help us run the platform. Each is bound by contractual confidentiality and data-protection obligations and only receives the data needed to perform its function:

ClerkAuthentication, sign-in, sign-up, and session management.
SupabaseDatabase and file storage.
VercelApplication hosting and content delivery.
StripePayment processing (card data is handled directly by Stripe).
TwilioSending and receiving SMS messages for AI text booking.
OpenAIGenerating AI assistant replies.
ResendTransactional email delivery (e.g., booking confirmations).
UpstashRate limiting and abuse prevention.

We may also disclose information to comply with the law, enforce our terms, protect our rights and safety, or in connection with a merger, acquisition, or sale of assets (with notice where required).

6. Data Retention

We retain account, business, and customer data for as long as your account is active or as needed to provide the service. Contact information collected before an account is fully created is retained until you complete signup, unsubscribe from marketing email, or ask us to delete it. SMS message bodies are retained for 90 days and conversation metadata for up to one year, as described above. When you delete a record (such as a client) or close your account, we delete or anonymize the associated data within a reasonable period, except where we must retain it to comply with legal, accounting, or security obligations.

7. Security

Every data record is scoped to a single business and protected by database row-level security, so businesses can only access their own data. Data is encrypted in transit, access to administrative tools is restricted and protected by multi-factor authentication, and secrets and webhooks are validated server-side. No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard safeguards.

8. Your Rights & Choices

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights:

  • Account holders (shops): manage your data in the app or contact us at privacy@fadekick.com.
  • Shop customers: contact the shop you booked with (the controller of your data), or reach us and we will route your request. Customers can delete their conversation data by texting STOP and requesting deletion.

We will respond to verified requests within the time required by applicable law.

9. Cookies

We use essential cookies and similar technologies to keep you signed in and to keep the product secure. We do not use third-party advertising cookies. You can control cookies through your browser settings, though disabling essential cookies may break core functionality.

10. Children's Privacy

FadeKick is intended for businesses and is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

11. International Users

FadeKick is operated by Opynbox LLC from the United States, and your information may be processed in the United States and other countries where our service providers operate. We take steps to ensure appropriate safeguards are in place for such transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice.

13. Contact Us

Questions about this policy or your data? Email us at privacy@fadekick.com.