Legal

Privacy Policy

Last updated: 1 October 2026

This Privacy Policy explains how TopBarber (“we”, “us”), operated by Ivan Damaschin, collects and processes personal data when you use topbarber.app, tenant subdomains, our admin panel, APIs, Telegram Mini Apps, and the TopBarber mobile app for iOS and Android.

Contact: hi@topbarber.app

1. Roles

• Platform operator (we): process data of business owners, staff, and end clients as needed to provide the Service.
• Subscribers (salon owners): act as controllers for their clients’ booking data; we act as processor on their behalf for that data.
• Paddle: processes subscription payments as Merchant of Record; see Paddle’s Privacy Policy for checkout data.

2. Data we collect

Account and business data: name, email, business name, tenant slug, timezone, subscription status.

Telegram data: when you use Telegram Login or the Mini App — Telegram user ID, display name, username, profile photo URL, and language (as provided by Telegram).

Booking and CRM data: client names, phone numbers, appointment details, service selections, notes entered by the business.

Mobile app: when you book — the name, phone number and comment you enter; when you sign in — the Telegram data above or, with Sign in with Apple, an Apple user identifier and the name you choose to share (we do not request your email). The app contains no advertising or tracking SDKs and does not track you across other apps or websites.

Technical data: IP address, browser/device type, access logs, cookies and similar technologies on the marketing site.

Payment data: we do not store full card numbers. Paddle handles payment instruments; we receive subscription status, invoice references, and billing metadata.

3. How we use data

• Provide, secure, and improve the Service;
• Authenticate users and enforce access controls;
• Send booking confirmations and reminders via Telegram or other configured channels;
• Process subscriptions and support requests;
• Comply with legal obligations and prevent fraud or abuse.

4. Legal bases (EEA/UK users)

Where GDPR applies, we rely on: contract performance (providing the Service), legitimate interests (security, analytics, product improvement), consent (where required, e.g. marketing cookies), and legal obligation.

5. Sharing and processors

We use trusted subprocessors, including:

• Hosting: Hetzner Online GmbH (EU/Germany) — application and database servers;
• Payments: Paddle.com — subscription billing;
• Telegram: Telegram Messenger LLP — authentication and notifications when you use Telegram features;
• Apple: Apple Inc. — authentication when you use Sign in with Apple;
• Analytics: Yandex Metrika on the marketing landing page (aggregated usage statistics).

We do not sell personal data. We may disclose data if required by law or to protect rights and safety.

6. International transfers

Data is primarily stored in the European Union. Where data is transferred outside your country, we use appropriate safeguards (e.g. standard contractual clauses) when required.

7. Retention

We retain data while your account is active and for a reasonable period afterward for backups, legal compliance, and dispute resolution. You may request deletion subject to legal and operational constraints.

Deleting your client account: in the mobile app open the ⋯ menu → Delete account. We delete the account and erase your name, phone number, Telegram details and comments from your client records in every business; bookings remain with the businesses without your personal data. If you signed in with Apple, we also revoke the app’s access to your Apple ID. Other ways to request deletion: topbarber.app/delete-account.

8. Security

We use encryption in transit (HTTPS/TLS), access controls, tenant isolation, and industry-standard practices. No method of transmission or storage is 100% secure.

9. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or port your data, and to object to certain processing. End clients of a Subscriber should contact that business first; platform requests: hi@topbarber.app.

10. Cookies

The marketing site may use cookies and local storage (e.g. language preference). Analytics cookies can be limited via browser settings. The admin app and Mini App use session tokens necessary for authentication.

11. Children

The Service is intended for businesses and adults. We do not knowingly collect data from children under 16.

12. Changes

We may update this Policy. The “Last updated” date will change; material updates may be communicated by email or in-app notice.