Privacy Policy

This Privacy Policy explains what personal information Turbo Link Studio ("Turbo Link," "we," "us," or "our") collects through the Turbo Link website, mobile application, and public booking pages (together, the "Service"), how we use it, and the choices you have. It applies both to independent professionals who run their business on Turbo Link and to their clients who book appointments, view galleries, or use the client portal.

1. Information We Collect

Account information. When you create a Turbo Link account: your name, email address, phone number, and business details (business name, logo, services, and pricing).

Client records you store. If you use Turbo Link to run your business, the client information you enter or import: names, contact details, appointment history, notes, photos, signed forms and contracts, and payment records. This information belongs to you and your clients, not to us; we process it on your behalf.

Payment information. Card details are collected and stored directly by Stripe, our payment processor. Turbo Link never receives or stores your full card number. We do receive limited payment metadata (amount, status, last four digits) needed to show you a transaction history.

Usage and device data. Standard technical information such as IP address, browser or device type, and how you interact with the Service, collected automatically to keep the Service secure and working correctly.

2. How We Use Information

• To provide, maintain, and improve the Service: your calendar, client book, invoicing, booking pages, and (for photography) delivery galleries;
• To process payments and payouts through Stripe;
• To send transactional email and text messages (booking confirmations, reminders, receipts, and account notices) and, where you've given consent, marketing messages like birthday greetings or broadcasts to your own clients;
• To provide customer support and respond to your requests;
• To detect, prevent, and address fraud, abuse, and security issues;
• To comply with legal obligations, such as tax recordkeeping.

3. How We Share Information

We do not sell your personal information. We share information only with the service providers ("processors") that help us run the Service, each bound to use it only to provide their service to us:

• Stripe: payment processing and payouts;
• Supabase: our database, authentication, and file storage infrastructure;
• Resend: delivery of transactional email;
• Telnyx: delivery of text messages.

Mobile information is never shared or sold. We do not share or sell mobile phone numbers, text messaging opt-in data, or SMS consent to any third party or affiliate for marketing or promotional purposes. The service providers listed above receive only what they need to deliver a message you asked for, and no category of sharing described in this Policy includes text messaging originator opt-in data or consent.

We may also disclose information if required by law, to protect the rights and safety of Turbo Link, our users, or the public, or in connection with a merger, acquisition, or sale of assets, subject to this Policy continuing to apply to your information.

4. Data Retention

We retain your information for as long as your account is active, and for a reasonable period after to allow reactivation, respond to legal or tax obligations, resolve disputes, and enforce our agreements. When you close your account or request deletion, we delete or anonymize your information within a reasonable time, except where we're required to keep it (for example, financial records for tax purposes).

5. Your Choices & Rights

You can access, correct, or export most of your information directly from your account. Your book, meaning your clients, photos, and notes, is exportable at any time; we don't hold it hostage. To request a copy of your data, a correction, or deletion of your account and associated information, email chris@cjohio.com. We will respond within a reasonable time and may need to verify your identity first. If you're a client of a Turbo Link professional and want to exercise these rights over information they hold about you, you can also contact that professional directly, since they control their own client records.

6. Children's Privacy

The Service is not directed to children, and account holders must be 18 or older. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will remove it.

7. Security

We use reasonable technical and organizational measures, including encryption in transit, access controls, and row-level security on client data, to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Changes to This Policy

We may update this Privacy Policy from time to time. If we make a material change, we will provide reasonable notice, such as an in-app notice or an email, before it takes effect.

9. Contact

Questions about this Policy, or a request about your data? Reach us at chris@cjohio.com.