CRWN connects Clients who are booking beauty and personal-care services with independent Providers who deliver them, and handles payment between the two. This Privacy Policy explains, in plain terms, what personal information we collect to make that possible, how we use and share it, and the choices you have. It covers CRWN's websites, mobile apps, booking tools, and related services (the “Platform”), and applies to Clients, Providers, and visitors. It should be read together with our Terms & Conditions. “CRWN,” “we,” and “us” refer to CRWN Inc., a Delaware corporation.
This Policy is drafted for CRWN's current United States operations. Because Clients and Providers use the Platform differently, some sections below are marked to show which group they apply to.
1. Introduction and Scope
This Policy applies to everyone who uses the CRWN Platform — Clients booking services, Providers offering them, and visitors browsing the site — and covers our websites, mobile apps, booking tools, and related services.
2. Information We Collect
We collect information in three ways: what you give us directly, what we collect automatically as you use the Platform, and what we receive from others.
2.1 Information you give us
- Account information: name, email address, phone number, password, and profile photo.
- Booking information: service selections, appointment times, location, and any special requests or notes you add for a Provider.
- Provider information: business name, license or certification numbers, portfolio images, service menu and pricing, and tax identification information.
- Payment information: billing name and address. Card and bank details are entered directly into our payment processor, Stripe, and are not stored on CRWN's own servers.
- Communications: messages between Clients and Providers sent through the Platform, and anything you send to CRWN support.
2.2 Information we collect automatically
- Device and usage data: IP address, device identifiers, browser type, operating system, pages or screens viewed, and interaction timestamps.
- Location data: approximate or precise location, where you enable it, used to show nearby Providers or verify a Service address.
- Product analytics and crash reporting, used to understand how the app is performing and where people run into trouble.
2.3 Information we receive from others
- Payment confirmation and fraud-risk signals from Stripe.
- Results from identity-verification or background-check providers, where CRWN uses one as part of Provider onboarding.
- A masked version of your contact details, if you have booked with another Provider on the Platform before, so a new Provider can send you a booking confirmation without seeing your full email or phone number until you complete a booking with them.
- Instagram profile and content, if a Provider chooses to connect their Instagram account. We receive certain profile information and media (such as photos) via Meta's Instagram API, used only to help populate that Provider's CRWN portfolio, and only to the extent the Provider authorizes.
- Providers can disconnect their Instagram account at any time in Account Settings, which immediately stops any further data collection through the Instagram API. To request deletion of Instagram-sourced content already imported to CRWN (such as previously synced photos), contact crwn@crwnhq.com.
3. How We Use Information
We use personal information to run the marketplace, keep it safe, and improve it — not to build advertising profiles for sale to third parties.
- Operate the Platform: create and manage accounts, process bookings, run payments and payouts, and connect Clients with Providers.
- Communicate with you: send booking confirmations, digital receipts, service updates, and respond to support requests.
- Trust and safety: verify Provider credentials, screen for fraud, investigate policy violations, and enforce our Terms & Conditions.
- Improve the Platform: analyze usage trends, troubleshoot issues, and develop new features.
- Marketing: send product updates or promotions where permitted, with an opt-out available at any time.
- Legal compliance: meet tax, accounting, consumer-protection, and other legal obligations.
4. How We Share Information
- Between Clients and Providers, as needed to complete a booking — for example, sharing a Client's name, contact details, and appointment notes with the Provider they booked, and a Provider's business information with the Client.
- With service providers who perform functions on our behalf, including Stripe (payments), Twilio (phone number verification), Meta/Instagram (for Providers who choose to connect their Instagram account), cloud hosting, identity verification, and customer-support tools, under confidentiality and data-processing obligations.
- For legal reasons: to comply with a law, subpoena, or court order, or to protect the rights, safety, or property of CRWN, our users, or the public.
- In a business transfer, such as a merger, acquisition, financing, or sale of assets, where personal information is one of the transferred assets.
4.1 What We Do Not Do
CRWN does not sell or share your name, phone number, email address, or other information that identifies you, and we do not share that information with third parties for their own marketing or advertising purposes.
We may, now or in the future, share aggregated or de-identified information — for example, trends in hair type, texture, styling preferences, or service demand across our user base — with third parties such as hair care and beauty companies, for research, product development, or industry insight. This information is stripped of names, contact details, and other identifiers before it is shared, and we contractually restrict recipients from attempting to re-identify it.
5. Cookies and Tracking Technologies
CRWN and its service providers use cookies, SDKs, and similar technologies to operate the Platform, remember preferences, measure performance, and, where applicable, personalize marketing.
- Essential: required for login, security, and core booking functionality.
- Analytics: help us understand how the Platform is used.
- Marketing: used to measure or deliver advertising, where enabled.
A current, itemized list of the specific cookies and SDKs in use, including their purpose and duration, is available on request at crwn@crwnhq.com. We currently do not respond to browser “Do Not Track” signals, but we do honor the Global Privacy Control and similar opt-out preference signals where required by law.
6. Your Privacy Rights
6.1 All users
- Access, correct, or update your account information directly in the app or by contacting crwn@crwnhq.com.
- Request deletion of your account and associated personal information, subject to legal retention requirements (for example, tax records).
- Opt out of marketing communications using the unsubscribe link or your in-app notification settings. Opting out of marketing does not stop transactional messages like booking confirmations or receipts.
6.2 California residents (CCPA/CPRA)
- Right to know the categories and specific pieces of personal information we've collected.
- Right to delete personal information, subject to exceptions.
- Right to correct inaccurate personal information.
- Right to opt out of the sale or sharing of personal information and out of certain profiling. CRWN does not sell or share personal information that identifies you (such as your name, phone number, or email address). As described in Section 4, we may share aggregated or de-identified information, which does not identify you and is not considered a “sale” of personal information under the CCPA.
- Right to non-discrimination for exercising these rights.
6.3 Other U.S. states
Residents of states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, Texas, and Oregon) have similar rights to access, correct, and delete their personal information and to opt out of certain targeted advertising, profiling, or sale, and may exercise them using the contact information below.
6.4 How to exercise your rights
Submit a request to crwn@crwnhq.com. We will verify your identity before responding and will respond within the time required by applicable law. If we deny a request, you may ask us to reconsider by replying to our response.
7. Data Retention
CRWN keeps personal information only as long as needed to provide the Platform, meet legal obligations, resolve disputes, and enforce our agreements. In general:
- Account and booking records: for the life of the account, plus 3 years after closure.
- Payment and transaction records: 7 years, to meet tax and financial record-keeping obligations.
- Support communications: 3 years from the date of the last interaction.
- Marketing preferences and opt-outs: retained until you request deletion, so we can continue to honor your choice.
When information is no longer needed, we delete it or de-identify it so it can no longer be used to identify you.
8. Data Security
CRWN uses administrative, technical, and physical safeguards designed to protect personal information, including encryption of data in transit, access controls limiting who can view personal information internally, and payment processing through Stripe's PCI DSS–compliant infrastructure, so CRWN itself never sees or stores full card numbers. If a breach compromising personal information occurs, we will notify affected users and regulators as required by applicable law. No method of transmission or storage is completely secure, and CRWN cannot guarantee absolute security.
9. Children's and Teens Privacy
CRWN is available to users age 13 and older. The Platform is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If we learn that we have collected personal information from a child under 13, we will delete it as soon as possible.
Users between the ages of 13 and 17 ('Teens') may only use CRWN consistent with the age eligibility requirements in our Terms & Conditions. We encourage parents and guardians to be involved in a teen's use of the Platform, including any in-person appointments booked with a Provider.
10. Provider-Specific Notices
This section applies specifically to Providers. In the course of delivering a Service, a Provider may collect Client information, such as contact details and service preferences shared directly with them or noted for a return visit. Providers are independently responsible for their own handling of that information and must comply with applicable privacy and data-protection law, separate from CRWN's obligations as the Platform operator.
11. International Users
CRWN is designed for use in the United States — our Providers, bookings, and payment processing are U.S.-based. We do not currently restrict access based on location, so individuals outside the United States may be able to access the Platform. If you access CRWN from outside the United States, your personal information will be transferred to, processed, and stored in the United States, where privacy laws may differ from those in your country. By using the Platform, you consent to this transfer. CRWN does not currently tailor its data practices to the specific legal requirements of other countries, and if you're located outside the U.S., protections available under your local law may not apply to your use of CRWN.
12. Changes to This Policy
We may update this Policy from time to time. If we make a material change, we will notify you through the Platform or by email before it takes effect. The “Last Updated” date above reflects the most recent revision.
13. Contact Us
Questions about this Policy or your personal information: crwn@crwnhq.com.