Privacy Policy

Last updated: September 26, 2026

Who we are

This policy covers the Hair Pro Partner website (hairpropartner.com), partner portal, text message program, and Shopify integration (together “Hair Pro Partner”, “the app”, “we”), operated by Hair Pro 360 LLC. Hair Pro Partner is a wholesale partner program and portal for salon and hair extension business owners. The Shopify integration connects approved brand partners’ Shopify stores to our catalog, professional-access and fulfillment systems.

Hair Pro Partner is operated by Hair Pro 360 LLC, 1235 East Blvd, Suite E #625, Charlotte, NC 28203. Contact us at hello@hairpro360.com.

What data we collect on our website and portal

  • Text message sign-up form (hairpropartner.com/sms): your name, business name, and mobile phone number, and, if you tick the consent box, the consent wording you agreed to, the date and time, and the IP address and browser it came from.
  • Partner portal: your login email, business and contact details you enter, and records of the actions you take in the portal (orders, pro account approvals, settings).
  • Professional account applications submitted to a partner store through our service, including contact details, credentials and an uploaded license document when supplied. The Hair Pro Partner Shopify app does not collect these.

What data we collect from your Shopify store

When you install the app, we store the following to operate the integration:

  • Your store domain (e.g. yourstore.myshopify.com) and email.
  • A Shopify OAuth access token, used solely to read and write data in your store as authorized by the scopes you granted at install.
  • Brand configuration you provide (display name, tagline, colors, notification email).
  • Product and variant mappings between your store and our wholesale catalog.
  • Records of wholesale orders placed through the app, including the Shopify order id, line-item identifiers, totals, and fulfillment state.

What customer data we access

When a customer purchases a product in your store that is tied to a managed catalog SKU, the app receives the order through a Shopify webhook. We store the order id, the customer's name and shipping address, and the line items as needed to produce the matching wholesale fulfillment order. We do not use customer data for analytics, marketing, profiling, or resale.

What we do not do

  • We do not sell any data to any third party.
  • We do not place tracking pixels, analytics scripts, or advertising tags on your storefront.
  • We do not contact your customers directly.

Where data is stored

Data is stored in Supabase (Postgres) in the United States. Shopify webhook payloads pass through Vercel edge infrastructure before reaching our application.

Who we share data with

We share the minimum data necessary to operate the service with: Stripe (for wholesale goods payment processing), Twilio (to deliver the optional Hair Pro Partner text messages you opt in to, as described below), Resend (for email notifications), and Shopify itself (to call the APIs on your store).

SMS / Text Messaging

Hair Pro Partner, operated by Hair Pro 360 LLC, offers an optional text message program for brand partners. You can opt in on our SMS sign-up page or in your partner portal profile by checking an unchecked consent box. When you opt in, we record your mobile number, the consent wording you agreed to, the date and time, and the IP address it came from, as a record of your consent. SMS consent is not required to use Hair Pro Partner services.

  • Message types: new pro account requests waiting for your approval, order updates, and account notices about your partner account. We do not send marketing texts through this program.
  • Frequency: message frequency varies with your account activity.
  • Cost: message and data rates may apply.
  • Opt out: reply STOP to any message to stop receiving texts. You will get one message confirming you have been unsubscribed.
  • Help: reply HELP for help, or email hello@hairpro360.com.
  • Carriers are not liable for any delayed or undelivered messages.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. We use Twilio only as our service provider to deliver the messages you asked for.

All of the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

How to request deletion

You do not need a Shopify store to ask us to delete your data. Email hello@hairpro360.com to delete your data or your SMS consent record, and we will confirm when it is done, within 30 days. To stop text messages at any time, reply STOP to any message.

Shopify stores: You can uninstall the app from your Shopify admin at any time. On uninstall, we receive an app/uninstalledwebhook and Shopify issues a shop/redact request 48 hours later. On receipt of that request we delete app-held data tied to your shop, including partner configuration, mappings, applications, order records, event logs and app-created backup files. If a deletion step fails, the endpoint asks Shopify to retry rather than recording an incomplete purge as successful. If you want expedited deletion before the 48-hour window, email us and we will honor the request within 3 business days.

Customer data requests

If a customer asks you for a copy of data we hold about them, Shopify will forward a customers/data_requestwebhook to us. For a registered partner store, we compile the customer data held by the app and deliver it to the store contact on file. We retain only a non-personal completion marker in the webhook log. If a customer asks for deletion, Shopify sends a customers/redact webhook; on receipt we remove matching application records, uploaded documents and the specific order records identified by Shopify within that store’s tenant.

Security

Store API calls use per-shop OAuth tokens. Shopify webhooks are HMAC-verified against the secret of the app that owns the subscription. Access tokens and application data are stored in access-controlled Supabase services; uploaded identity documents and app-created store backups use private blob storage. Production access is restricted to authorized Hair Pro 360 operators.

Changes to this policy

We’ll post material changes here and update the “Last updated” date. Continued use of the app after a change means you accept the revised policy.