Legal

Privacy Policy

Last updated June 2026

Our promise

Data dignity is doctrine at Opal. Client data is held under explicit consent, used only to serve the relationship it belongs to, and never sold. Our commercial model never depends on the resale of consumer identity.

What we collect

For businesses using Opal, we process account details, the business data you connect (such as bookings, point of sale, intake, and product history), and usage information needed to operate the service. For visitors to this site, we collect only basic, privacy-respecting analytics.

How we use it

We use your data to provide and improve the Opal service: to build client memory, surface retention and revenue recommendations, and answer your questions in your brand voice. We do not use your client data to train models for other businesses.

The SkinTwin

A client SkinTwin is owned by the business that holds the relationship and is portable under the client’s consent. Clients may request access, correction, or deletion of their information at any time.

Sharing

We share data only with the service providers required to run Opal, such as payment processing and infrastructure, under strict confidentiality. We never sell personal data.

Security

Traffic is served over TLS and sensitive records are encrypted at rest. Secrets are held only in server-side environment variables and are never exposed to the browser.

Your rights

You may request access to, correction of, or deletion of your personal data, and you may withdraw consent where processing is based on it. Contact us to exercise these rights.

Contact

Questions about privacy can be sent to hello@opalbeautysystems.com.