Privacy Policy

Aesthetic Hub Inc., a Delaware corporation (“Aesthetic Hub,” “we,” “our,” or “us”), provides business-management, scheduling, client relationship management, payment, communication, media, education, artificial-intelligence-assisted, and related technology services (collectively, the “Services”) to beauty, aesthetics, medical-aesthetics, wellness, tattoo, paramedical, education, retail, and other eligible businesses and professionals (“Businesses” or “Professionals”).

This Privacy Policy explains how Aesthetic Hub collects, uses, discloses, retains, and otherwise processes personal information from and about Businesses, Professionals, Account Owners, Authorized Users, prospective customers, website visitors, event participants, referral-program participants, and other individuals who interact directly with Aesthetic Hub through our websites, business-facing mobile applications, sales and support channels, and related Services. Account Owners, practitioners, employees, contractors, educators, administrators, and other persons authorized to use a Business Account are collectively referred to as “Business Users.”

This Policy does not govern the independent privacy practices of a Business or Professional or replace the privacy policy that applies to its own clients, customers, patients, students, attendees, purchasers, or other individuals (“Business Clients”). Businesses and Professionals use the Services to manage their own Business Clients. Aesthetic Hub provides the technology and generally processes Business Client information on behalf of the applicable Business or Professional, subject to applicable agreements and law.

Aesthetic Hub may process personal information in different legal roles depending on the context. For information about website visitors, prospective customers, Business Users, our own communications, security, billing, compliance, product administration, and marketing, Aesthetic Hub generally determines the purposes and means of processing and acts as a “business,” “controller,” or similar responsible organization under applicable law.

For personal information a Business submits or collects about Business Clients through the Services (“Business Client Data”), the Business generally acts as the “business,” “controller,” or responsible organization, and Aesthetic Hub generally acts as its “service provider,” “processor,” or technology vendor.

That processing is also governed by our Data Processing Addendum (“DPA”).

This Policy does not apply to Business Client Data that Aesthetic Hub processes on behalf of a Business or Professional. That information is governed by the applicable Business’s privacy policy, Aesthetic Hub’s agreements with the Business, and any separate Aesthetic Hub Client Privacy Notice presented through the applicable client-facing feature. Business Clients should contact the applicable Business or Professional regarding its privacy practices or to exercise rights concerning information controlled by that Business.

Information You Provide Directly

• Account and contact information, such as name, email address, telephone number, mailing address, username, password, authentication information, job title, and communication preferences.
• Business and professional information, such as legal and trade names, business address, website, services, hours, prices, policies, portfolio content, locations, staff roles, professional category, licenses, credentials, permits, insurance information, and tax or ownership information.
• Billing, financial, and payment information, such as subscription selection, billing address, payment method details, bank or payout information, tax identification information, payment status, and transaction history. Payment processors may collect some information directly.
• Identity-verification information, such as identification or professional-license numbers, when collected for identity verification, fraud prevention, enforcing our rights and obligations, payment services, or legal compliance.

• Business Content and information you choose to provide, such as service descriptions, prices, policies, business hours, portfolio content, photographs, videos, product information, course materials, communications, and files uploaded or generated through the Services.
• Communications and support information, including emails, text messages, chats, support tickets, survey responses, feedback, and recordings or transcripts of calls or video sessions where notice and consent requirements are satisfied.
• Referral and promotion information, such as a referred person’s name, business, email address, telephone number, referral relationship, eligibility status, reward information, and tax-reporting information.
• Other information you choose to provide or direct us to collect.

Information Collected Automatically

• Device and technical information, such as IP address, device identifiers, browser type, operating system, application version, mobile carrier, language, time zone, and device settings.
• Usage and log information, such as pages or screens viewed, features used, clicks, searches, session dates and duration, referring and exit pages, crash information, error logs, and interactions with emails or notifications.
• Approximate location derived from an IP address and, only with device permission where a feature requires it, precise geolocation.
• Cookie, SDK, pixel, local-storage, and similar technology information used for authentication, security, preferences, analytics, performance, communications measurement, and, if enabled with appropriate choices, advertising.

Information From Other Sources

• Businesses, Account Owners, Authorized Users, Business Clients, and persons who refer or invite you.
• Payment processors, financial institutions, identity-verification providers, fraud-prevention providers, communications providers, and integration partners.
• Public records, professional-license databases, sanctions lists, business directories, social networks, data providers, and other lawful sources.
• Third-party services you connect to Aesthetic Hub, according to your settings and the permissions you grant. We may combine information from these sources and derive inferences, such as likely feature interests, professional category, risk indicators, or approximate location. We use inferences only for the purposes described in this Policy and subject to applicable law.

• Provide, operate, configure, maintain, and support the Services and Business Accounts.
• Create and authenticate accounts; manage Authorized Users, permissions, locations, subscriptions, and preferences.
• Provide scheduling, forms, e-signatures, communications, media, CRM, payments, point-of-sale, inventory, education, reporting, AI-assisted tools, and other activated features.
• Process subscription charges, payments, payouts, refunds, disputes, chargebacks, taxes, and financial reconciliation.
• Respond to questions, troubleshoot, provide customer service, and communicate operational, transactional, security, legal, billing, and account information.
• Personalize the Services and remember settings and preferences.
• Analyze performance and usage; debug; maintain quality; conduct internal research; and maintain, develop, and improve products, Services, and features.
• Use artificial intelligence and machine learning to provide requested features, support the Services, and improve the performance and quality of those features.
• Verify identity, licenses, eligibility, ownership, payment information, and compliance information.

• Protect accounts, recipients, networks, and the Services; detect and prevent fraud, abuse, security incidents, illegal activity, spam, and violations of our agreements.
• Operate referral, affiliate, ambassador, event, survey, promotional, and educational programs and administer associated rewards.
• Send marketing and promotional communications as permitted by law and the recipient’s preferences. Consent to promotional text messages is not required to purchase or use the Services.
• Market and advertise Aesthetic Hub; identify and communicate with prospective customers; personalize marketing; measure campaigns; and, if enabled, deliver or evaluate advertising subject to applicable choices.
• Comply with law, legal process, tax and recordkeeping duties, professional obligations, card-network requirements, and lawful government requests.
• Establish, exercise, or defend legal claims; enforce agreements; protect rights, safety, and property; and support corporate transactions.
• Support business operations and corporate transactions.
• Use information for another purpose disclosed at collection, permitted by law, or with consent.

• Vendors, service providers, contractors, and consultants that perform services on our behalf, including hosting, data storage, security, analytics, customer support, communications, identity verification, payment processing, fraud prevention, marketing, and product support.
• Payment processors, financial institutions, card networks, financing providers, and other payment partners for enabled payment services.
• Communications technology providers and telecommunications carriers used to provide telephone, SMS, MMS, email, push notification, or related features.
• Integrations and business partners when a Business activates an integration, requests a jointly offered feature, or directs us to exchange information.
• The applicable Business and its Authorized Users when a Business Client interacts with that Business through the Services.
• Affiliates under common ownership or control, subject to this Policy and applicable law.
• Professional advisers, auditors, insurers, lenders, and investors where reasonably necessary to advise, protect, finance, or manage our business.
• Law-enforcement agencies, regulators, courts, governmental authorities, or other parties when required by law or reasonably necessary to protect rights, safety, property, security, or the integrity of the Services.
• A buyer, investor, successor, lender, or other relevant party in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction.
• Other recipients with consent, at your direction, or as disclosed when information is collected. We may de-identify, anonymize, or aggregate information and use or disclose the resulting information for lawful purposes. We will not attempt to re-identify information maintained as de-identified except as permitted by law. Mobile-originator opt-in data and consent for text messaging will not be sold or disclosed to third parties or affiliates for their own marketing or promotional purposes. We may disclose that information to communications providers and carriers solely as necessary to deliver messages, maintain consent and opt-out records, prevent abuse, and comply with law.

In connection with our payment processor, Stripe, we may collect or receive payment and financial information provided by Businesses or Professionals, including limited payment-method information, bank or payout information, tax information, transaction status, disputes, refunds, and identifiers needed to provide payment features, troubleshooting, fraud prevention, and support. The payment processor may collect and process information directly under its own privacy notice and applicable agreements.

Aesthetic Hub and its providers may use cookies, software development kits (“SDKs”), pixels, web beacons, local storage, and similar technologies on the Services and in our communications. These technologies collect information about browsers, devices, interactions, pages or screens viewed, links clicked, dates and times, referring pages, application use, and whether communications were opened or acted upon.

Essential Technologies

These technologies are necessary to operate the Services, authenticate users, maintain sessions and preferences, protect security, prevent fraud and abuse, and provide requested functionality. The Services may not function properly without them.

Functional and Personalization Technologies

These technologies remember choices such as language, region, login preferences, and selected features and help provide a more personalized experience. Disabling them may reduce functionality or personalization.

Analytics Technologies

These technologies help us understand how individuals access and use the Services, measure performance, identify errors, evaluate content and features, and improve our Services and communications.

Targeted Advertising Technologies

These technologies may be used to deliver advertising relevant to your interests, limit how often an advertisement is shown, measure advertising effectiveness, and understand activity over time and across websites, applications, or devices. We may also disclose identifiers, such as email addresses or telephone numbers, in hashed or otherwise transformed form to advertising partners so they can help us create, exclude, measure, or reach advertising audiences.

Some advertising and analytics activities may constitute “selling,” “sharing,” or processing for “targeted advertising” under certain U.S. state privacy laws, even when no money is exchanged. Eligible individuals may opt out by selecting “Your Privacy Choices” or “Cookie Preferences” in the footer of our website. Where required, we also process legally recognized opt-out preference signals, such as Global Privacy Control.

Choices may apply only to the browser or device used and may need to be renewed after cookies are cleared or another browser or device is used.

Most browsers and devices also allow users to control cookies, advertising identifiers, location, camera, photographs, microphone, contacts, and notifications. Blocking a technology or permission may affect availability or functionality.

Business Users may receive operational and transactional messages relating to accounts, trials, subscriptions, renewals, billing, payments, security, support, compliance, maintenance, and feature or policy changes. These messages are necessary to administer an active Account and may continue after a marketing opt-out.

You may opt out of marketing email through the unsubscribe link. You may opt out of promotional texts by replying STOP or using another disclosed method. Message and data rates may apply. Where required, promotional SMS or automated marketing-call consent will be requested separately and will not be a condition of purchasing the Services.

You can manage push notifications and device permissions through device settings. You may update certain Account information and communication preferences through the Services. Transactional records, security records, and information needed to comply with law may not be editable or deletable through Account settings.

Aesthetic Hub may offer referral, affiliate, ambassador, promotional-credit, or similar programs. A participant may provide information about a prospective Business or Professional and may receive a reward if applicable program requirements are met. By submitting another person’s information, the participant represents that the person would reasonably expect the referral and that the participant is authorized to provide the information for that purpose. Program-specific terms and any additional legally required notice will be provided when a program is offered.

We retain personal information for as long as reasonably necessary and proportionate for the purposes described in this Policy. Retention depends on the nature and sensitivity of the information; Account and subscription status; feature configuration; legal, tax, financial, professional, and reporting requirements; payment, dispute, and fraud-prevention needs; security and backup cycles; statutes of limitation; legal holds; and the need to establish or defend claims.

When information is no longer required, we may delete, de-identify, aggregate, or isolate it from further processing. Backups may persist for a limited period through ordinary cycles. Account cancellation does not necessarily constitute immediate Account deletion, and we may retain information as necessary to comply with law, maintain transaction records, prevent fraud, resolve disputes, enforce agreements, or establish or defend legal claims.

We maintain administrative, technical, and organizational safeguards designed to protect personal information, taking into account the nature of the Services and information. Safeguards may include access controls, encryption, authentication, monitoring, secure development practices, vendor oversight, incident response, backups, and workforce training.

No system is completely secure. Businesses and Business Users are responsible for protecting their devices, credentials, networks, exports, permissions, and local copies. If you believe an Account or information has been compromised, contact support@aesthetichubpro.com promptly.

Aesthetic Hub is based in the United States and initially provides the Services to eligible Businesses in the United States and Canada. Personal information may be processed in the United States, Canada, and other countries where Aesthetic Hub or its service providers operate. Those countries may have privacy laws different from those in your jurisdiction, and information may be accessible to courts, law-enforcement agencies, or governmental authorities under local law.

For Canadian personal information transferred to a service provider outside Canada for processing, Aesthetic Hub and the applicable Business remain accountable as required by applicable law and use contractual and organizational measures appropriate to the processing. Additional transfer terms may be included in the DPA.

Depending on your jurisdiction and subject to legal exceptions, you may have rights to know or access personal information; receive information in a portable format; correct inaccurate information; delete information; withdraw consent; restrict or object to processing; opt out of sale, sharing, targeted advertising, or certain profiling; limit certain uses of sensitive information; and appeal a denied request.

To exercise a right concerning information Aesthetic Hub controls, contact support@aesthetichubpro.com or use the “Your Privacy Choices” link on our website. We may verify your identity and authority before

completing a request. An authorized agent may be required to provide signed permission or other legally sufficient authority. We will not unlawfully discriminate against an individual for exercising a privacy right.

Rights are not absolute. We may deny or limit a request when permitted by law, including to protect another person’s rights, preserve security, complete transactions, maintain legally required records, prevent fraud, or establish or defend claims. If information is controlled by a Business, we may direct the request to that Business.

This section supplements the Policy for residents of California and other U.S. states with comprehensive privacy laws. The rights and disclosures that apply depend on where you reside and whether Aesthetic Hub is subject to the applicable law.

Categories of Personal Information

During the preceding twelve months, Aesthetic Hub may have collected: identifiers and account details; customer-record information; commercial, subscription, payment, and transaction information; internet or other electronic-network activity; approximate or permission-based geolocation; audio, electronic, visual, and similar information; professional, employment, and education information; and inferences drawn from such information. Certain account credentials, payment information, precise geolocation, and government identifiers may qualify as sensitive personal information. We use sensitive personal information only for permitted purposes, including providing requested Services, account access, security, fraud prevention, payments, and legal compliance, and not to infer characteristics about an individual.

The sources of these categories are described in Section 3. We collect and use them for the business and commercial purposes described in Section 4 and disclose them to the categories of recipients described in Section 5. The particular categories processed depend on how an individual interacts with Aesthetic Hub.

Sale, Sharing, and Targeted Advertising

Aesthetic Hub does not sell personal information for money. Our use of advertising technologies or disclosure to advertising and marketing partners may, however, be considered a “sale,” “sharing” for cross-context behavioral advertising, or processing for targeted advertising under certain state laws. The categories involved may include identifiers, such as cookie or device identifiers and hashed or otherwise transformed email addresses or telephone numbers, and internet or other electronic-network activity. The recipients are advertising, analytics, and marketing partners.

You may opt out through “Your Privacy Choices” or “Cookie Preferences” in the website footer. Where required, we also honor recognized opt-out preference signals, including Global Privacy Control, for the browser or device sending the signal. We do not knowingly sell or share personal information of individuals under sixteen.

State Privacy Rights

Subject to applicable law and exceptions, eligible residents may request access to or confirmation of processing; categories or specific pieces of personal information; correction; deletion; portability; a list of categories of third parties to which information was disclosed where required; or an appeal of a denied request. Eligible residents may also opt out of sale, sharing, targeted advertising, or certain profiling that produces legal or similarly significant effects and may limit qualifying uses or disclosures of sensitive personal information. Aesthetic Hub will not unlawfully discriminate against an individual for exercising a privacy right.

Submit an access, correction, deletion, portability, or appeal request to support@aesthetichubpro.com or through our privacy-request form when available. Submit an advertising opt-out through “Your Privacy Choices” or “Cookie Preferences.” We may request information reasonably necessary to verify your identity and request. Authorized agents may submit requests where permitted by law, subject to verification of their authority and, when permitted, confirmation directly from the individual.

California residents may also request the categories of personal information collected, sources, business or commercial purposes, categories of recipients, categories sold or shared, and specific pieces of personal information, as provided by law. California’s “Shine the Light” law may permit certain residents to request information about disclosures for third parties’ own direct-marketing purposes. We do not provide financial incentives or price or service differences in exchange for personal information unless we first provide the notice and obtain any consent required by law.

Individuals outside the United States may have additional rights under local law. Subject to applicable requirements and exceptions, these may include access, correction, deletion, portability, withdrawal of consent, restriction or objection to processing, and a complaint to a privacy regulator. Aesthetic Hub will respond according to the law applicable to the request and the role in which it processes the information.

Aesthetic Hub processes Canadian personal information in accordance with applicable federal and provincial private-sector privacy laws. Subject to those laws, individuals may request access to and correction of personal information, withdraw consent where processing depends on consent, and raise a concern about our practices.

Consent may be express or implied depending on the sensitivity of the information and reasonable expectations, but express consent may be required for sensitive or unexpected processing. Withdrawing consent may affect Aesthetic Hub’s ability to provide a requested feature or maintain an Account when the information is reasonably necessary for that purpose.

Canadian individuals may contact Aesthetic Hub’s Privacy Officer at support@aesthetichubpro.com or at 8 The Green, Suite 8, Dover, Delaware 19901. If a concern is not resolved, an individual may have the right to contact the Office of the Privacy Commissioner of Canada or the applicable provincial privacy authority.

The Services covered by this Policy are not directed to individuals under eighteen, and an individual must be at least eighteen years old to create or control a Business Account. We do not knowingly collect personal information directly from individuals under eighteen through the Services covered by this Policy. If you believe an individual under eighteen has provided personal information directly to Aesthetic Hub, contact us so we can take appropriate action.

The Services may contain links to, embed, or interoperate with third-party websites, applications, payment methods, social networks, and services. Their privacy practices are governed by their own notices. Aesthetic Hub is not responsible for the independent privacy or security practices of a third party merely because the Services link to or integrate with it.

We may update this Policy to reflect changes in law, technology, Services, or information practices. We will post the revised Policy and update the “Last Updated” date. For a material change, we will provide reasonable additional notice through the Services, email, or another appropriate method before the change takes effect when required by law.

If a change would materially expand our use of previously collected personal information in a way that is incompatible with the purposes disclosed when collected, we will provide additional notice and obtain consent where required.

We intend this Policy to be reasonably accessible. If you need this Policy in an alternative format or require assistance accessing it, contact support@aesthetichubpro.com.

Questions about this Policy, Aesthetic Hub’s privacy practices, or a privacy-rights request may be directed to: Privacy Officer Aesthetic Hub Inc. 8 The Green, Suite 8 Dover, Delaware 19901 Email: support@aesthetichubpro.com Service and support questions may also be sent to support@aesthetichubpro.com.