SPA SCROLL

Privacy Policy

Last updated: October 2026

Who I am

Spa Scroll (the "dashboard") is operated by Mason Vukonich, based in Arizona, United States. "I," "me" and "my" mean Mason Vukonich. Questions? Email mason@spascroll.com.

What data I collect

• Account information: your name, email address, password and your role (for example injector, esthetician or spa owner).

• Payment information: handled directly by my payment processor. Your card details never touch my servers. I only store your customer ID and membership status.

• How you use the dashboard: videos you save, filters you use, and basic technical details like your device, browser and IP address.

• Messages you send me: through the help form in Settings or by email.

Public creator content

The dashboard features publicly available Instagram and TikTok videos from aesthetics professionals, along with public details like the creator's handle, views, likes, comments and the video's script. I link to each original post. I never access private accounts or messages. Creators can ask to be removed by emailing mason@spascroll.com, and I'll honor it promptly.

How I use your data

• To run the dashboard: log you in, save your favorites and show you videos

• To manage your membership, payments and cancellations

• To send account emails, like password resets, receipts and updates about new videos

• To answer your messages, fix problems and improve the dashboard

Why I'm allowed to use it (EU and UK members)

To provide the membership you signed up for, to meet legal requirements like tax records, and for my legitimate interest in running and improving the dashboard.

Third-party services

I don't sell your data, and I don't share it with advertisers or data brokers. I only share it with service providers that help run the dashboard, such as payment processing, website hosting, database and login services, email delivery, error monitoring, and AI tools used to create tips. They may only use your data to provide their service to me.

Cookies

I use cookies to keep you logged in and to understand basic usage. I don't use advertising or third-party tracking cookies.

Data storage and security

Your data is stored with secure, access-controlled providers and protected with encrypted connections. No system is 100% secure, but I take reasonable steps to protect your information.

Your rights

• Access, correct or export your data: email me.

• Delete your account: email me, and I'll delete your account and data within 30 days. Records I'm legally required to keep, like payment and tax records, may be kept.

• Cancel anytime: use "Manage billing" in your dashboard Settings.

If you're in the EU, UK or another place with data protection laws, you may also have the right to limit or object to how I use your data, and to complain to your local data protection authority.

Data retention

I keep your data while your account is active. After deletion, copies may remain in encrypted backups for a short time before they're removed.

International members

Your data may be stored in the United States or other countries. When it's transferred, I rely on my providers' safeguards, like standard contractual clauses, to protect it.

Children

The dashboard is for business owners and professionals and isn't meant for anyone under 18.

Changes to this policy

If I make significant changes, I'll let members know by email or in the dashboard. The date at the top always shows the latest version.

Contact

Spa Scroll · Mason Vukonich · Arizona, United States · mason@spascroll.com