Privacy Policy

Effective date: August 10, 2026. Pompado ("Pompado," "we," "us") provides appointment booking software for barbershops at pompado.com. This policy explains what we collect, why, and the choices you have. We wrote it to be read.

Who the data belongs to

When you book with a barbershop through Pompado, the shop is the business you're dealing with, and your booking information is fundamentally the shop's client record. Pompado processes that data on the shop's behalf to run bookings, deposits, and reminders. We are not a marketplace: we do not advertise other shops to you, and we do not use one shop's client list to benefit anyone else.

What we collect

• Booking details: your name, phone number, email, the service and time you booked, and any note you add.
• Payment details: handled by Stripe. Card numbers go directly to Stripe over their secure forms - Pompado never sees or stores your card number. We store only booking-related records such as "deposit paid."
• Shop account data: for barbershop owners - your business details, services, prices, schedule, and client records you import.
• Basic technical data: logs necessary to run and secure the service. We do not run advertising trackers on booking pages.

Text messages (SMS)

• Appointment texts are sent only if you opt in via the unchecked consent box when booking. Booking works fine without it - you'll get email instead.
• Message frequency varies (typically 1-3 messages per appointment: confirmation and reminders). Message and data rates may apply. Reply HELP for help or STOP to opt out at any time; we honor opt-outs immediately and keep a record of your consent and opt-out status.
• No third-party marketing - ever: text messaging originator opt-in data and consent are not shared with any third parties or affiliates for marketing or promotional purposes. All categories of data we share with service providers below exclude this information.

How we use data

• To run bookings: showing availability, confirming appointments, sending the reminders you opted into.
• To protect shops' income: processing deposits and enforcing the cancellation policy you accepted at booking.
• To support customers and keep the service secure and reliable.
• We do not sell personal data. We do not share client lists between shops. We do not send marketing texts.

Service providers (subprocessors)

We use a short list of infrastructure providers, each only for its job: Amazon Web Services (hosting, databases, email delivery), Stripe (payments), Twilio (text message delivery). If we add a provider (for example, an AI assistant service such as Anthropic for the optional receptionist feature), we'll update this list before it processes booking data.

Retention & deletion

Booking records are kept while the shop's account is active, because they are the shop's business records. Shops can export everything at any time and can delete client records on request. If a shop closes its account, its data is exportable for 60 days and then deleted from production systems (backups age out on a rolling schedule). To ask about or delete your own data, email us and we'll coordinate with the shop - or ask your barber directly.

Children

Appointments for children are booked and managed by a parent or guardian under the adult's contact information. We do not knowingly collect personal information from children beyond a first name on the appointment.

Security & incidents

Data is encrypted in transit, access is restricted, and backups run nightly with tested restores. If a breach affects your personal data, we will notify affected shops and individuals without undue delay, consistent with Texas law and other applicable requirements.

Changes & contact

If this policy changes materially, we'll post the update here with a new effective date and notify shop owners by email. Questions or requests: hello@pompado.com. Pompado is operated from North Texas, USA.