Doorcut

Privacy Policy

Last updated 29 September 2026

Doorcut connects customers with mobile stylists, barbers, nail technicians, makeup artists and lash and brow specialists. This page says what we collect, why we need it, and who else sees it.

What we collect

• Your name, phone number and email address, so you can sign in and so a provider knows who they are meeting.
• The addresses you save, and the map position each was looked up to, so we can tell which providers travel to you.
• Your bookings — what you booked, when, with whom, and what happened.
• The name and phone number of anyone you book for, so we can tell them a provider is coming.
• A hairstylist’s or barber’s certificate as the Skilled Trades Ontario public register shows it (their legal name, the certificate number, its type and when it expires), when we looked and who looked, and that the name on the register matched their photo ID whenever we checked that too, which we always do before we approve them or before they add hair or barbering. We look them up then, and again as each renewal falls due. A look as a renewal falls due is recorded only when it shows something new, such as the renewal; one that finds nothing changed is not recorded. At a renewal we look at their photo ID again only if the name on the register is not the one we matched to it before. If, before the expiry date we hold, the register no longer shows the certificate as current, we record what it showed, when, and who looked, and their hair and barber bookings are paused until we record a look showing it current again, such as a renewal. We also record each time they tell us in the app that they have renewed, and the reminders and notices about their certificate that we send them and our own team.

We do not store your card number. Payments are handled by Stripe, and card details go to them directly.

Your mobile number

We do not sell, rent or share mobile phone numbers with third parties for marketing purposes, and no third party receives your number for their own marketing. Your number is shared only with our messaging provider (Twilio) so that a message can be delivered to you, and — once a booking is accepted — with the provider you booked, so they can reach you about that appointment. If somebody else books an appointment for you, your name and mobile number go to the provider with the request, before it is accepted.

Text messages, and how often

We send two kinds of text message, both of them about something that was asked for:

• Sign-in codes. One message each time a code is requested — typically one or two a month.
• Appointment updates, to the person an appointment is for. Up to four messages per booking: a confirmation, a reminder the day before, one when the provider sets off, and one when they arrive.

Message and data rates may apply. Reply STOP to any message to stop receiving them, or HELP for help. We send no marketing text messages.

Who else sees your information

• The provider you book sees your name, what you booked and when, and any note you add, from the moment you send the request. Your phone number and the address are shown to them only once the booking is accepted. If you book for somebody else, that person’s name and mobile number go to the provider with the request.
• Stripe handles payments and payouts.
• Twilio delivers text messages.
• Brevo delivers email such as receipts.
• Supabase hosts the database and files behind the app.

Photos sent in a chat are kept at web addresses that are not listed anywhere, but anybody who has a photo’s address can open it without signing in.

We do not sell your information to anybody, for any purpose.

How long we keep it

Booking and payment records are kept as long as the law requires us to keep financial records. Our copies of the messages Stripe sends us about payments and payouts are kept whole for 180 days from when each one arrives, and then cut down to a short record of what each was about. Everything else is kept while your account exists, and some of it stays after an account is closed: what, and why, is under Deleting your account, below.

Your choices

You can see and change your details in the app, reply STOP to stop text messages, and delete your account yourself, in the app or at doorcut.app/delete-account. Some records are kept even after an account is closed; Deleting your account, below, says which and why.

Deleting your account

In the app, open Account and choose Delete my account. It takes effect straight away: your name, contact details, addresses and photos are removed, your saved card is removed from our payment processor, your sign-in is closed, and you are taken off every list a professional keeps. While an appointment is still to come, or money is owed on one, the app asks you to cancel or settle it first.

If you cannot get into the app, go to doorcut.app/delete-account: we send a code to the email address or phone number you sign in with, and nothing is deleted until that code is entered. We never delete an account on the strength of an email alone; write to support@doorcut.app if you get stuck and we will help you through the page.

Some things are kept, and we would rather say so than have you find out. A record of each appointment stays, with your name and contact details removed, because receipts were issued and we have to keep financial records. Where a professional recorded that nobody came to the door, or that an appointment was called off while they were on the way, the time, the place their phone gave and their note stay with that appointment, as the evidence for the fee. Our payment processor, Stripe, keeps its own records of the payments you made or received, as it is required to, and a professional's payouts account is theirs with Stripe and is not closed by deleting a Doorcut account. We also keep, for 180 days from when each one arrives, our copy of the messages Stripe sends us about payments and payouts, which can include payment and contact details, because a dispute can arrive months later; after that we keep only a short record of what each message was about and when it arrived, without the payment or contact details. Reviews you wrote keep their words and the words of messages you sent stay in the conversation for the other person, both without your name, because they are part of that person's record too. A safety report about a person is not erased by that person deleting their account. We keep the record of which version of our terms you agreed to, and, for a professional, the record of how we checked them before approval (including, if we declined them, a copy of their page as it was then, without its address), with the looks we recorded at their certificate on the register, any record that the register did not show it as current, each time they told us they had renewed, and the reminders and notices about their certificate that we sent them and our own team; and their business name stays on appointments they completed, as the seller on those customers' receipts. And for a customer, your email address and phone number go on a list that stops Doorcut from ever sending you messages on behalf of a professional again. On that list they are kept only as a scrambled code that lets us recognise the address or number if it's used again, not in readable form.

Children

Doorcut accounts are for people 18 and over. A booking for somebody under 18 is made by their parent or guardian.

Contact

Questions about any of this go to support@doorcut.app.