Terms & Conditions

1. Who we are

E-cut is a booking platform operated by Techland, connecting clients with independent hairdressers. Using the platform (as a client, hairdresser, or any other account type) means you accept these terms.

2. Accounts & roles

• Client — browses hairdressers, books and pays for haircuts.
• Hairdresser — manages their profile, availability, and haircut models; receives payouts.
• Sub-Admin / Super Admin — Techland staff who manage accounts and platform operations. They can see the data submitted through forms (profiles, bookings, salon details), but not raw payment card data, which never reaches Techland at all.
• Consultant — a Techland-authorized role that can see financial transactions only (amounts, reference codes, statuses, dates) for accounting/reporting purposes — never client or hairdresser personal data or form content.

3. What data we collect & how it's stored

We collect only what's needed to run the platform:

• Account details: name, email, phone, password (stored as a salted bcrypt hash — we never store or can see your actual password).
• Hairdresser profile: salon location (captured automatically from the map, not typed in manually), chair number, haircut models offered, and pricing.
• Bookings: date, time, service, and — if you book for someone else — that person's first name, last name, and contact so the hairdresser can reach them.
• Operational logs: sign-in activity, IP address at signup (used only to prevent trial-offer abuse), and an internal activity log of account actions for security auditing.

Sensitive fields such as a hairdresser's payout bank details are encrypted at rest (AES-256-GCM) and only the last 4 digits are ever displayed, to anyone, including Techland staff. Database credentials and API keys are kept outside the application code and are never exposed to any user-facing page.

4. Payments & payouts — we never store your card

Techland/E-cut never collects, stores, or has access to your credit or debit card number, expiry date, or security code — at any point, for any account type. All card payments are handled directly by Stripe, a PCI-DSS compliant payment processor. Techland only ever sees a payment's status, amount, currency, and an internal reference code — never the underlying card data.

Hairdressers add their payout debit/credit card or bank details directly through Stripe's own secure onboarding flow. Once a booking is marked completed (client QR code scanned), the hairdresser's share is transferred automatically by Stripe to that destination — Techland does not manually move client money and does not hold client funds in its own account beyond the platform fee.

5. Hairdresser subscriptions & launch trial offer

Hairdressers subscribe to the platform at USD 20/month or USD 220/year, billed via Stripe. All amounts on the platform are shown with the currency code (e.g. "USD 20") rather than a bare "$" symbol, for clarity.

As a launch offer, new hairdressers receive a free trial period: the first 20 hairdressers to sign up receive 3 months free, the next 10 receive 2 months free, and all hairdressers after that receive 1 month free. Trial tier is assigned automatically, in signup order, and is final once granted. One free trial is allowed per device/network to prevent abuse.

6. Contracts & receipts

When a hairdresser signs up, they automatically receive by email a short agreement confirming their relationship with Techland — stating the trial length if on a trial plan, or the paid plan's terms if they paid. Clients receive a receipt by email for every haircut payment. These documents are stored securely and are not shared outside Techland except as legally required.

7. Booking rules

• A client may hold one active booking for themselves at a time.
• A client may also book, separately, one active booking for someone else, by providing that person's first name, last name, and contact.
• Payment for a booking is collected online, via Stripe, at the time of booking.

8. Security

• All traffic is served over HTTPS; sessions are protected against fixation and hijacking.
• Passwords are hashed with bcrypt; sensitive fields are encrypted at rest.
• Company email is hosted with our provider and configured with anti-spoofing measures (SPF/DKIM/DMARC) to protect both our staff and the people we email.
• Access to administrative areas is role-restricted and logged.

9. Data retention & your rights

We keep account and booking data for as long as your account is active and as needed for legal, accounting, and dispute-resolution purposes afterward. You may request a copy of your data or request deletion of your account by contacting us (see below); some records may be retained longer where required by law (e.g. payment records).

10. Changes to these terms

We may update these terms as the platform evolves. Material changes will be highlighted on this page with an updated date.

11. Contact

Questions about this policy or your data can be sent to our support team through the app, or by email to our published contact address.