Salonn Privacy Policy

Effective date: August 29, 2026

Salonn, Inc. ("Salonn," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our mobile application(s), VR/headset-based applications, website, and related services (collectively, the "Services").

Our Services are currently intended for users located in the United States and are not directed to individuals under 18 years of age.

By using the Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Services.

1. Who We Are & How to Contact Us

Data controller:

Salonn, Inc.
1300 South Blvd STE 36278 Charlotte, NC 28203
United States

Email (privacy & support): contact@getsalonn.com

If you have questions about this Policy or our privacy practices, contact us at the email above.

2. Scope of This Policy

This Privacy Policy applies to information we collect:

• Through the Salonn mobile app, any VR or headset-based applications, and any related web pages (including getsalonn.com).
• When you create an account, participate in salons (including live audio, video, or VR salons), post content, send messages, or otherwise interact with the Services.
• When you communicate with us, such as by email or support channels.

It does not apply to:

• Third-party websites, apps, or services that we do not control.
• Third-party services you may access through links or integrations in the Services.

3. Information We Collect

We may collect the following categories of information about you.

3.1 Account & Profile Information

When you create or update an account, we collect:

• Email address
• Display name / username
• Profile photo
• Short bio
• Interests / tags
• Phone number

You may choose to provide additional profile details at your discretion.

Sensitive topics. Your chosen interests, tags, salons, and content may indicate or reveal information such as your political opinions, religious or philosophical beliefs, or other sensitive topics. You are not required to provide this information, and you control what you choose to share.

3.2 Content, Messages, Live Audio/Video & Activity

When you use the Services, we collect information about your activity, including:

• Posts, comments, replies, and other contributions in salons and topics.
• Salon membership and follow relationships (which salons or users you follow or join).
• Direct messages and other private communications sent through the Services.
• Uploaded images, videos, and audio.
• Participation in live salons, including real-time audio, video, and VR sessions (for example, when you join, speak, or react in a live salon).
• In-app interactions, such as likes, follows, joins, invitations, reactions, and similar actions.
• Usage information, such as the date/time you access the Services, the features you use, and the content you view or interact with.

We may use automated systems, and in limited cases human review, to analyze and process content and messages (including direct messages and, where applicable, live or recorded audio/video) for the purposes of:

• Detecting spam and abuse
• Enforcing our Terms of Service and Community Guidelines
• Maintaining safety, security, and service integrity

We do not use your direct messages for advertising.

We do not currently record or store live salon audio or VR sessions on our servers beyond short-term buffering necessary to operate the service (for example, handling network latency and quality in real time). If this changes, we will update this Privacy Policy before such changes take effect.

If we allow hosts or Salonn to record or save a live salon in the future, any such recording will be treated as User Content and handled under this Policy and our Terms of Service.

3.3 Device, Log, Approximate Location & VR Data

When you use the Services, we automatically collect technical information, such as:

• Device and platform information: device type, hardware model, operating system and version, app version, device identifiers, and, where applicable, VR/AR hardware and platform information (for example, headset model, controller type, VR runtime or platform).
• Log and diagnostics data: IP address, access times, pages/screens viewed, app events (such as taps, scrolls, feature usage), crash logs, performance metrics, and error reports.
• Network and connection information: mobile operator or ISP, language, time zone, connection type (e.g., Wi-Fi or mobile), and general network information.
• Approximate location: city/region derived from your IP address. We do not collect precise GPS location.
• VR interaction signals: basic interaction and session telemetry necessary to operate VR salons, such as controller inputs, simple avatar state (e.g., position/orientation relative to the virtual room), mute/unmute state, join/leave events, and similar system events.

This information helps us operate, secure, and improve the Services (including VR environments) and understand how they are used.

3.4 Analytics & Crash Reporting Tools

We use the following third-party tools to keep the Services reliable and to understand how they are used. These tools may collect information such as IP address (used only to derive approximate city/region-level location, not precise GPS), device and app information, usage events, session information, and error data.

• Sentry – crash reporting, error monitoring, and performance diagnostics. This helps us detect, diagnose, and fix crashes, bugs, and performance issues. This processing is necessary to operate and secure the Services and is active for all users.
• PostHog – product analytics. This helps us understand how features are used (for example, login events, which features you use, and how long you spend in a salon room) so we can improve the Services. Where required or offered, you may opt out of product analytics through your in-app privacy settings without losing access to the Services. Opting out does not disable crash reporting or other processing necessary to operate and secure the Services.
• Amazon CloudWatch – logging, monitoring, and operational metrics for our infrastructure. This helps us maintain the security, availability, and performance of the Services.

We configure these tools to collect only what we need to operate, secure, and improve the Services. We do not use these tools for third-party advertising, and we do not sell the information they collect.

3.5 SMS / Text Messages

If you provide a phone number, we use it to send you transactional, account-related text messages (SMS), most importantly one-time verification codes (also called one-time passcodes or "OTPs") used to verify your identity, secure your account, and enable sign-in or two-factor authentication.

• These messages are transactional and security-related only. We do not send marketing or promotional text messages, and we do not sell or share your phone number for marketing purposes.
• Message and data rates may apply, depending on your mobile carrier and plan. Message frequency depends on your activity (for example, each time you request a verification code).
• We use a third-party SMS/communications provider to deliver these messages on our behalf; that provider processes your phone number solely to transmit the messages and acts under obligations to protect your information.
• You can stop receiving verification texts by removing your phone number from your account or closing your account; note that doing so may disable phone-based verification and related security features.

If we ever introduce non-transactional or promotional text messages in the future, we will obtain any additional consent required by law and provide opt-out instructions before sending them, and we will update this Policy.

3.6 No Payment Data at Launch

At launch, Salonn does not process payments or store payment card information. If we later introduce paid features or in-app purchases (for example, via app stores or a payment processor), payment information will be handled by the relevant payment provider under their own privacy policy. We will update this Privacy Policy before such changes take effect.

3.7 Information You Provide Directly to Us

You may provide information directly when you:

• Contact us by email or through support channels.
• Respond to surveys or provide feedback.
• Participate in beta programs, feature tests, or research initiatives.

The information you choose to share will depend on your communication and may include contact details, opinions, or other personal data.

3.8 Information from Other Users and Third Parties

We may also receive information about you from:

• Other users: for example, when they mention you, tag you, or include you in posts, salons, or messages.
• Service providers and partners: for example, security or anti-abuse tools that provide signals to help detect fraud, spam, or harmful activity.
• Public or third-party sources: where permitted by law and necessary to investigate abuse, enforce our terms, or protect our rights or the rights of others.

We treat this information in accordance with this Privacy Policy.

3.9 Summary of Categories of Personal Information

The following table summarizes the categories of personal information we collect (using the categories defined under U.S. state privacy laws, including the California Consumer Privacy Act, as amended), the sources, the business purposes for which we use each category, and the types of parties to whom we may disclose it. Because the Services have not yet launched, this table describes the information we collect by design as part of providing the Services.

We do not sell your personal information and do not share it for cross-context behavioral advertising, as those terms are defined under U.S. state privacy laws. We also do not disclose personal information to third parties for their own direct marketing purposes. We use sensitive personal information only as necessary to provide the Services and for related security and safety purposes, and not to infer characteristics about you or for advertising.

4. How We Use Your Information

We use the information we collect for the following purposes:

To provide and maintain the Services

• Create and manage your account.
• Enable you to participate in salons, including live audio, video, and VR salons; post content; follow topics and users; and send messages.
• Display your profile, posts, and activity to other users according to the design of the Services.

To operate core features

• Provide in-app notifications (e.g., likes, follows, replies, messages, invites).
• Maintain salon memberships, follower/following lists, and other social features.

To personalize your experience

• Suggest salons, topics, or users you may want to follow.
• Order and present content based on your activity, interests, and interactions.
• Combine information we collect across your devices and across different features of the Services to provide a more consistent and relevant experience.

To secure and protect the Services

• Detect, prevent, and address fraud, abuse, and security incidents.
• Enforce our Terms of Service and Community Guidelines.
• Monitor and respond to suspicious activity.

To analyze and improve the Services

• Monitor performance, usage, and trends using analytics and crash reporting tools (including Sentry, PostHog, and Amazon CloudWatch).
• Fix bugs, improve reliability (including VR performance), and develop new features.
• Conduct internal research and product development using aggregated or de-identified data.

To communicate with you

• Send transactional emails only, such as account-related messages, security alerts, and important service updates.
• Send transactional text messages (SMS), such as one-time verification codes used to verify your identity and secure your account. We do not send marketing text messages. Message and data rates may apply. See Section 3.5 for details.
• Respond to your inquiries and support requests.

To comply with legal obligations

• Respond to lawful requests from authorities.
• Meet applicable legal, regulatory, and compliance requirements.

With your consent

• For any additional purposes that we describe at the time of collection and for which we request your consent (where required by law).

We do not currently use third-party ad networks or serve targeted third-party advertisements inside Salonn, and we do not sell your personal data.

5. Legal Bases for Processing (EEA/UK Users)

Although the Services are currently intended for users in the United States, if you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

• Performance of a contract: To provide and operate the Services you request, including account creation, salon participation (including live and VR salons), messaging, and support.
• Legitimate interests: To secure and improve the Services, prevent abuse, analyze usage, and communicate with you about service-related matters, provided these interests are not overridden by your rights and interests.
• Compliance with legal obligations: To comply with applicable laws, regulations, and lawful requests.
• Consent (including explicit consent for sensitive data): Where you choose to share content, interests, or salon participation that reveals sensitive information (e.g., political views, religion, philosophical beliefs), we treat that as you giving us consent to process that information for the purpose of providing the Services. You may withdraw this consent by removing such content or closing your account.

6. How We Share Information

We do not sell your personal data and we do not share your personal data for cross-context behavioral advertising as defined by U.S. state privacy laws. We also do not disclose your personal information to third parties for their own direct marketing purposes.

We may share your information in the following situations:

With other users of the Services

• Your username, profile photo, bio, interests, salon memberships, posts, and activity may be visible to other users depending on the product design and your actions.
• Direct messages and private communications are visible to the participants in those conversations.
• In live salons, your presence, avatar, and what you say or share (audio/video) are visible or audible to other participants in that salon.

With service providers

We use third-party providers to help us operate and improve the Services, such as:

• Amazon Web Services (AWS) – hosting, storage, and infrastructure.
• Amazon CloudWatch – logging, monitoring, and operational metrics.
• Sentry – crash reporting, error monitoring, and performance diagnostics.
• PostHog – product analytics.

We may also use additional providers in the future (for example, transactional email or notification services). These service providers act on our instructions and are bound by obligations to protect your personal data.

For legal, safety, and protection purposes

We may disclose information if we reasonably believe it is necessary to:

• Comply with a law, regulation, legal process, or governmental request.
• Protect the rights, property, or safety of Salonn, our users, or the public.
• Enforce our Terms of Service, Community Guidelines, and other agreements.
• Detect, investigate, or prevent fraud, security issues, or technical problems.

In these cases, we may preserve information for longer than usual if it is the subject of an investigation, legal request, or dispute.

Business transfers

If we are involved in a merger, acquisition, asset sale, financing, reorganization, bankruptcy, or similar transaction, your information may be transferred as part of that transaction. Any successor entity will be required to honor this Policy or a privacy policy with similar protections.

With your consent

We may share information for any other purpose disclosed to you and with your consent.

7. Cookies, Mobile Identifiers, and Analytics

On the web and in the app, we may use:

• Cookies or similar technologies (for web usage).
• Mobile identifiers or device IDs (for app usage).
• Analytics and crash reporting tools (such as Sentry, PostHog, and Amazon CloudWatch) to analyze usage, improve performance, and maintain security.

These tools may collect information such as IP address, device information, app version, usage events, and error data.

Your Choices for Cookies and Identifiers

• Your browser may allow you to block or delete cookies. If you do so, some parts of the Services may not function properly.
• Your mobile device may provide controls for resetting or limiting advertising identifiers and controlling push notifications.
• Where offered, you may opt out of product analytics through your in-app privacy settings.
• Where required by law, we will obtain your consent before using non-essential cookies or similar technologies.

8. Data Retention

We retain your information only as long as reasonably necessary for the purposes described in this Policy or as required by law.

• Account & profile data: kept while your account is active. If you request account deletion, we will delete or anonymize your personal data after a 90-day retention period, except where we are legally required or have a legitimate interest to retain certain information (e.g., for security, fraud prevention, or legal obligations).
• Content and activity: posts, comments, messages, and other contributions are generally retained while your account is active. When you delete your account:
  • We delete or anonymize content we control, subject to the retention period above.
  • Content that others have shared about you (for example, their posts that mention you or replies to your content) may remain because it is part of their account or the shared discussion.
  • We may retain certain content in backup copies or logs for a limited time.
• Live salons and VR sessions:
  • We do not currently record or store live salon audio or VR sessions on our servers beyond short-term buffering necessary to operate the service (for example, to handle network latency and quality in real time).
  • If we introduce server-side recording or saving of live salons, recordings will be treated as User Content and retained or deleted under the same rules that apply to other content in this section, and we will update this Policy before such changes take effect.
• Logs and analytics data: retained for as long as necessary for security, operational, and analytical purposes, in line with our legitimate interests and legal obligations.
• Legal holds and violations: if your account or content is the subject of a legal request, investigation, or suspected policy violation, we may preserve relevant information for as long as reasonably needed to address the issue and prevent repeat abuse.

We may anonymize or aggregate data so that it no longer identifies you. We may use such data indefinitely.

9. Data Security

We use reasonable technical and organizational measures designed to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These measures may include:

• Encryption in transit
• Role-based access controls
• Secure infrastructure on AWS
• Logging and monitoring using Amazon CloudWatch and related tools

No system is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

10. International Data Transfers

Your information is processed and stored primarily in the United States (for example, on AWS infrastructure). If you access the Services from outside the United States, you understand that your information will be transferred to, and processed in, the United States, which may have different data protection laws than your country.

For users in the EEA/UK, where required by law, we will use appropriate safeguards (such as standard contractual clauses) when transferring personal data outside the EEA/UK.

11. Your Privacy Rights – U.S. State Laws

Depending on where you live in the United States, you may have certain rights regarding your personal data, including:

• Right to know/access – to request information about the categories and specific pieces of personal data we have collected about you.
• Right to deletion – to request that we delete personal data we have collected from you, subject to certain exceptions.
• Right to correction – to request that we correct inaccurate personal data we maintain about you.
• Right to non-discrimination – we will not discriminate against you for exercising your privacy rights.
• Right to opt out of sale/sharing – we do not sell your personal data or share it for cross-context behavioral advertising.

We also do not disclose personal information to third parties for their own direct marketing purposes.

To exercise any of these rights, contact us at:

Email: contact@getsalonn.com

We may need to verify your identity before fulfilling your request. You may also designate an authorized agent to make certain requests on your behalf, subject to verification requirements.

12. Your Privacy Rights – EEA/UK

If you are in the EEA or UK, you have the following rights under data protection laws:

• Right of access – to obtain confirmation whether we process your personal data and to access that data.
• Right to rectification – to request correction of inaccurate or incomplete personal data.
• Right to erasure ("right to be forgotten") – to request deletion of your personal data in certain circumstances.
• Right to restriction of processing – to request that we restrict processing in certain situations.
• Right to data portability – to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller where technically feasible.
• Right to object – to object to processing based on our legitimate interests and to direct marketing.
• Right to withdraw consent – where processing is based on consent (including explicit consent for sensitive data), you may withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

To exercise your rights, contact us at contact@getsalonn.com.

You also have the right to lodge a complaint with your local data protection authority if you believe our processing of your personal data violates applicable law.

13. Children's Privacy

The Services are not directed to individuals under the age of 18, and we do not knowingly collect personal data from anyone under 18.

If we become aware that we have collected personal data from someone under 18, we will take reasonable steps to delete it as soon as possible. If you believe that a user under 18 has provided us with personal data, please contact us at contact@getsalonn.com.

14. Your Choices & Controls

You generally have the following options:

• Account settings: review and update certain account and profile information in the app.
• Content management: edit or delete your posts, comments, and other contributions where the interface allows.
• Analytics: where offered, opt out of product analytics through your in-app privacy settings.
• Notifications: manage in-app notifications through app settings and device settings.
• Cookies & identifiers: manage cookie settings in your browser and device-level identifier settings on your phone.
• Account deletion: request account deletion. After your request is processed, we will handle your data as described in Data Retention, including the 90-day retention period.

If you cannot access certain settings or need help, contact us at contact@getsalonn.com.

15. Third-Party Links & Services

The Services may contain links to third-party websites, apps, or services that are not operated by Salonn. If you click on a third-party link, you will be directed to that third party's service.

We are not responsible for the privacy practices or content of third-party sites or services. We encourage you to review the privacy policies of any third parties you interact with.

16. Automated Decisions

We do not use your personal data for automated decision-making that produces legal effects or similarly significant effects for you without human involvement (such as automated credit or eligibility decisions).

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will:

• Change the "Effective date" at the top of this Policy; and
• Where required by law, notify you of material changes (for example, within the app or by email) and obtain your consent if necessary.

Your continued use of the Services after the updated Policy becomes effective constitutes your acceptance of the revised Policy.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, you may contact us at:

Salonn, Inc.
1300 South Blvd STE 36278 Charlotte, NC 28203
United States
Email: contact@getsalonn.com