Privacy policy

Effective October 6, 2026

Information we collect

We collect the contact, appointment, service, payment-status, loyalty, preference, message, and inspiration-photo information you provide to book or manage an appointment. Card details are collected directly by Square and are not stored on Envy X Nailz servers.

How it is used

We use this information to schedule services, prevent double-booking, collect deposits, send transactional confirmations and reminders, provide the client portal, and operate the studio. Marketing texts are sent only when separately enabled and can be stopped at any time by replying STOP.

Service providers

Cloudflare hosts the application, database, and private media. Square processes current payments; existing Stripe payment records are retained. Resend sends booking emails. Twilio verification and text messages are not currently connected. Payment providers receive the information needed to process payments.

Design photos and AI assistance

Inspiration photos, current-nail photos, notes and replies are private to the client with access to the submission and the studio. Keep your private design and booking links private: anyone you share them with can access that submission.

AI assistance is optional and off by default. If you allow it for a request, inspiration photos and notes may be sent to Google Gemini to help Giana assess the design. Giana reviews the suggestion; AI does not approve bookings or automatically change the price. Permission to use an image as a future AI example and permission to share it publicly are separate, optional choices for each photo. Only grant reuse permission for photos you own or may authorize.

Retention and choices

Booking and payment records are retained for operational, fraud, accounting, and legal needs. You may update your profile and messaging preferences in the portal. To request access or deletion, message the studio directly or through the client portal; records that must be kept by law may be retained.

You can remove design photos or delete the submission from its private page and turn off future photo reuse. Deletion removes access on the site immediately; storage cleanup retries if necessary. Your appointment, payment records and accepted service-change record remain. Revoking permission stops future use through this feature; it cannot recall a photo already shared externally or undo an earlier AI request.