Terms of Service

goldenhour is a software service operated by Gabriel Oleas ("we," "us") that helps beauty and wellness artists ("you," "artist") manage bookings, clients, payments, and communications. The service runs at goldenhourhq.com and on tenant-specific subdomains and custom domains.

We provide the software. You bring your business, your customers, and your professional judgment. The relationship between you and your customers is yours — we are not a party to it.

When you sign up, you create an account tied to your email + a Clerk-managed credential (passwordless email, Apple, or Google). You are responsible for the security of your sign-in and for any actions taken from your account.

You agree to provide accurate business information during onboarding and to keep it current. If you're operating under a brand name that isn't yours to use, your account may be suspended.

goldenhour charges a flat monthly subscription. Current rates are listed on the pricing page; founding-cohort artists (first 100 accounts) lock their rate at signup for the lifetime of the account.

You can cancel anytime from Settings. Cancellation takes effect at the end of the current billing period — you keep access through what you've paid for. Refunds for partial months aren't issued in the normal flow; email support if you have an exceptional situation and we'll be reasonable.

Stripe processes every payment we receive from you, and every payment your customers make to you via your booking page. Standard Stripe fees apply on customer payments (2.9% + 30¢ online, 2.7% + 5¢ in-person) — we do not skim, mark up, or take a commission.

Your customers' payments flow directly into your Stripe Connect account, not ours. We never hold customer funds on your behalf.

You may use goldenhour for any lawful beauty / wellness / personal-services business. You may not:

• Use the service to send spam (SMS, email, or otherwise) — Twilio + Resend retain right to suspend at any time for abuse, and so do we.
• Operate businesses that violate Stripe's prohibited-business list (firearms, gambling, controlled substances, etc.). Stripe will close your Connect account and we'll close ours.
• Attempt to access another tenant's data. Tenant isolation is enforced by Postgres row-level security; circumvention attempts get the account terminated.
• Reverse-engineer the software in a way that creates a competing product. Reading the visible HTML / inspecting our embed widget for your own legitimate use is fine.
• Use AI features to generate content that violates a third party's rights or that you couldn't lawfully publish yourself.

We do our best to keep the service running. Live operational status is published at /status. We don't promise specific uptime numbers today — when our scale supports a meaningful SLA we'll publish one.

Scheduled maintenance is announced in advance via the status page; emergency maintenance may happen without notice but is rare.

If a third-party vendor we depend on (Stripe, Twilio, Resend, Vercel, Neon, Cloudflare, Clerk, Anthropic) has an outage, the affected feature may be temporarily unavailable. We surface this on the status page when we can detect it.

You own the client records, appointments, photos, and messages you bring into the service. We process this data on your behalf to provide the service. The full technical breakdown of where it lives, how it's encrypted, and how long it's retained is on the trust page.

When you close your account, your data stays accessible for 30 days for export. After that we purge per the trust page schedule. Audit-log entries are retained 12 months for fraud / dispute defense (no client PII; just action records).

We do not sell your data, your clients' data, or any aggregate derived from it. We do not train AI models on it. Anthropic API calls run with zero-data-retention configured.

You are the data controller for your clients' records under GDPR / CCPA / similar frameworks. We are your data processor.

You're responsible for getting appropriate consent from your clients before adding them to the service, sending them SMS / email, capturing photos, etc. We provide the tools (intake forms, photo-consent dialog, marketing-opt-out flag) but the consent flow is on you.

If a client of yours invokes a right-to-be-forgotten request, email support@goldenhourhq.com — we'll purge per the trust page within 30 days.

We may change features, pricing, or these terms over time. Material changes get communicated via email + a notice on the changelog. If you don't accept a change, you can close your account before the change takes effect.

Founding-cohort pricing is excluded from this — your rate stays locked even if we raise the standard rate.

goldenhour is provided "as is." To the maximum extent permitted by law, our total liability for any claim related to the service is capped at the amount you paid us in the 12 months preceding the claim.

We are not liable for indirect, consequential, or incidental damages — lost business, lost revenue, lost data backups that we'd already provided to you, etc.

Nothing in this section limits liability for things we can't legally limit (e.g. willful misconduct, fraud, gross negligence).

You can cancel anytime from Settings. We can suspend or terminate accounts for material breach of these terms (especially the acceptable-use section) with prior notice when reasonable.

On termination, your access ends; the 30-day data-retention window above applies regardless of who initiated the termination.

These terms are governed by the laws of the State of Florida, United States, without regard to conflict-of-law principles. Any dispute will be resolved in the state or federal courts located in Miami-Dade County, Florida.

Questions about these terms: support@goldenhourhq.com. We'll respond within a business day, usually faster.