Legal
Privacy
What we store, who else can see it, and how long we keep it.
Last updated 17 September 2026
The short version
We store what a studio needs to run and nothing beyond it. We do not track you across the web, we run no analytics and no advertising pixels, and we do not sell or share anything with anyone who is not helping us run the service. A studio’s client list is the studio’s, not ours.
Two kinds of information, two different responsibilities
Your studio’s own details — the account, the subscription, the payments. We decide what is collected here and we answer for it.
Your clients’ details — the names and numbers in your client list, the bookings, the sales. Your studio decides what to record and why. We hold it on your behalf and do nothing else with it. If one of your clients asks what you hold about them, that question is for you, and we will help you answer it.
What we hold about your studio
- Account — email address, your name if you gave one, and a password we never see in readable form. Sign-in is handled by Supabase.
- Studio — its name, its address on this domain, its colours, opening hours, services and prices, and anything you write or upload onto your page.
- Subscription and payments — which plan, which cycle, invoices, and for each transfer: the bank it came from, the name on the sending account, the date, the amount, and the receipt image you uploaded.
- A record of administrative actions — who confirmed a payment and when, so that a question about money has an answer.
What we hold on your behalf
- Clients — name, and optionally phone number, email and a note your studio writes. Membership balance and its top-ups, where you use them.
- Sales — what was bought, when, for how much, and which client it was for when you attached one.
- Bookings — the name, phone number, requested services and time a visitor submits through your page.
Why
To run the studio you are paying for, to take the payment, to tell you when a term is about to end, and to answer you when you write to us. We do not use any of it to build a profile, to advertise, or to train anything.
Who else can see it
We use four outside services, each for one job:
- Supabase — sign-in, the database, and storage for uploaded images including payment receipts.
- Vercel — hosting. It serves every page and keeps short-lived request logs.
- Resend — the renewal reminder emails, and nothing else.
- WhatsApp — only when you or a client chooses to open a conversation from a button on a page. We send nothing there on our own.
Each holds data only to do that job. Beyond them, we share information when the law requires it, and otherwise not at all. We do not sell data and there is no arrangement under which anybody could buy it.
These services run outside Indonesia, so the information described here is stored abroad.
Cookies
One kind: the cookie that keeps you signed in. It is set when you sign in, cleared when you sign out, and does nothing else. There are no analytics or advertising cookies on this domain, which is why you have never been asked to accept any.
A studio’s public page sets no cookies at all for the people who visit it.
How long it is kept
A studio’s records are kept for as long as the studio exists, including after a subscription has lapsed — see the terms for why: so that renewing brings everything back. Payment and invoice records are kept as long as we are required to keep accounting records.
Ask us to close a studio and we erase its records, including its clients’ details, and confirm when it is done. Payment records are the exception and survive, because they are accounts.
Your rights
Ask us for a copy of what we hold about your studio, ask us to correct it, or ask us to erase it. Transactions can be exported to a spreadsheet from the dashboard without asking anyone. For anything else, WhatsApp 081318573583 and we will answer within a few days.
If you are a client of a studio rather than a studio yourself, ask the studio — they decide what is recorded about you, and they can change or remove it.
Children
NailOS is a tool for running a business and is not intended for children. We do not knowingly hold an account for one.
Changes
If we change what we collect or who we share it with, we will email the studio’s owner before the change takes effect. The date at the top of this page is when it last changed.
Reaching us
Lumenity Studio, Cipta graha raya, Bandung. WhatsApp 081318573583.