Privacy for people who book

Last updated September 22, 2026

You booked at a shop whose booking site runs on Thrivari. Your relationship is with the shop; we are the software behind it, working for them. For anything about your own record, ask the shop. For anything about the software, email hello@thrivari.com.

The short version

What the shop keeps

Your name, your phone number, your email if you gave one, the family members you book for and their first names, your appointments past and future with the staff member and the service, any notes the shop writes, memberships and credit, and records of what you paid.

If you save a card, the card itself is held by Square, the payment company. The shop and Thrivari keep only a reference that Square will honor for that shop and nobody else. We never see the card number.

How you sign in

With your phone number and a six-digit code sent by text, so there is no password to remember or lose. The code is sent by Twilio, which sends texts for the shop.

Messages

You get texts and emails about your own bookings: confirmations, reminders, and changes. If the shop wants to send anything else, such as an offer, it asks you first, and you can reply STOP to any text to end texts from that shop.

On the booking site

Like any website, it sees a rough location from your connection, the kind of device you use, and how you arrived. It records what you press, so the shop can see where people get stuck. It keeps a small random ID in your browser to keep you signed in. No third-party cookies, no ad trackers, and your IP address is never stored.

Who else is involved

Nobody else, unless the law requires it. Nothing about you is sold or shared for advertising.

Seeing, fixing, and deleting your record

Ask the shop, or email hello@thrivari.com with the phone number you book with, and it is done within 30 days. Deleting your record cancels any future bookings you have with that shop.

The shop keeps your record for as long as you are a client. If the shop stops using Thrivari, its records are deleted from our systems 90 days later, apart from payment records the tax rules make us keep.

Children

Children are booked by a parent or guardian, under the parent's account, with a first name and the haircut. We never collect anything from a child directly.

Changes

We update the date at the top when this changes.