PolyshOS
Privacy
what we keep.
Effective October 11, 2026. This policy describes how Tangents LLC handles information for PolyshOS, including appointment notifications sent for participating studios.
This page covers the PolyshOS product at PolyshOS. Each studio can publish its own booking policies at /s/{slug}/legal.
What we collect
- Staff accounts: name, email, password hash, optional email 2FA enrollment.
- Studio records: clients, appointments, tickets, inventory, and forms you enter.
- Payments: Stripe payment and customer identifiers. Card numbers stay with Stripe.
- Device session tokens and notification identifiers so staff stay signed in and receive requested alerts.
- Selected nail photos, captions, client contact details, appointment notes, messages, and other content entered by the studio.
- Purchase and payment history, business and billing addresses, and financial records used for studio checkout, reporting, and payroll.
- Payment SDKs may process approximate location, device identifiers, interaction and diagnostic information to operate payments, prevent fraud, and improve reliability. Card details entered into Stripe components are processed by Stripe; PolyshOS does not store card numbers or security codes.
How it is used
To run bookings, desk checkout, and studio operations you ask PolyshOS to perform. We do not sell client lists. Mobile numbers, SMS consent records, and opt-in data are not sold, rented, or shared with third parties or affiliates for marketing or promotional purposes. Service providers may process this information only to operate PolyshOS and deliver the services requested by the customer or studio.
Retention
We retain information while needed to provide the requested services and meet applicable legal obligations. Selected photos are stored in the configured private object storage. Deleting a studio record from an operational screen may archive it for recovery and does not by itself erase personal data.
Account deletion and privacy requests
In the iPhone or iPad app, open More → Delete account to request permanent deletion of your account and associated personal data. The same option is available before studio onboarding and when studio access is paused. Confirm with your current password. You do not need to call or email support to initiate deletion. We complete requests within 30 days and send confirmation to your account email. You can check the request status in the app while it is processed.
Information that we are legally required to keep, such as certain financial or employment records, may be retained for the applicable period. Other studio members’ accounts and data are not deleted by your request. We review studio ownership, outstanding obligations and any separately billed subscription you own as part of fulfillment. Contact us below for access, correction, export, or other privacy questions.
Service providers
We use hosting, storage, payment, authentication, monitoring and communication providers to deliver the features you use, including Hostinger, AWS, Stripe and Google where connected. These providers process information for their respective services. Stripe SDKs also collect interaction information for payment analytics and reliability. The native app does not use advertising tracking or sell personal data.
Cookies
Necessary cookies keep staff signed in and complete Google Calendar OAuth. We do not use advertising cookies. A notice appears until you dismiss it.
Texts
Appointment SMS follows the booking checkbox and STOP handling described in SMS terms. Message frequency varies with appointment activity and is typically no more than four messages per appointment. Message and data rates may apply. Text messaging originator opt-in data and consent will not be shared with any third parties or affiliates for marketing or promotional purposes. Consent is specific to the studio selected by the customer and is not transferable to another studio. Live SMS stays off until the provider and 10DLC registration are approved.