GetSpaPOS runs on hosted servers over encrypted connections, with automatic backups, role-based permissions and an activity history. We do not claim PCI, SOC 2 or HIPAA certification; card data is handled by your payment processor, not stored by GetSpaPOS.

Does GetSpaPOS store card numbers?

No. Card payments are processed by your payment processor and card reader. GetSpaPOS records the payment result, not the card number.

Who owns my salon data?

You do. We host it to run the software and never sell it. You can export it at any time.

What happens to my data if I cancel?

You can export it for 30 days after cancellation. After that it is deleted from the live system and removed from backups as they rotate.

Can technicians see other technicians' pay?

No. Each technician sees only their own sales, commission and tips unless you give them a manager role.

Is it suitable for medical records?

No. GetSpaPOS is not a medical records system and makes no HIPAA claim. Med spas should keep clinical records in a dedicated system.

How do I report a security issue?

Use the contact form and choose "security" in your message, or see the data request page. We respond to security reports as a priority.

Do you use my clients' data for marketing?

No. Your client list is used only to run your salon's account. The bundle's automations send messages only on your behalf, to your clients.

Your salon's data, kept safe and kept yours.

How GetSpaPOS hosts, backs up and protects merchant data, in plain words. No badges, no jargon, no claims we cannot back.

Start free trial Book a demo

How merchant data is protected

GetSpaPOS is hosted software: your salon's records live on managed servers, every connection is encrypted, backups run automatically, and access inside your account follows the roles you set. Card numbers never touch GetSpaPOS; your processor handles them.

Encrypted in transit

Every connection to GetSpaPOS uses HTTPS (TLS), from the front desk tablet to the server.

Hosted servers

The software runs on servers we manage, not on your front desk computer, so a stolen or broken tablet does not take your data with it.

Backups

Databases are backed up automatically on a schedule and kept off the main server, so a failure can be restored.

Roles and permissions

Decide who can refund, edit tips, see payroll or export clients. Technicians see only their own pay.

Activity history

Sales, refunds and edits are recorded with the user and time, so you can see who changed what.

Your data, exportable

Export clients, sales and products any time, and for 30 days after you cancel.

What we do not claim

We do not claim PCI DSS, SOC 2, ISO 27001 or HIPAA certification for GetSpaPOS. Card payments run through your own payment processor, which carries its own compliance. If your business needs a specific certification, ask us on a demo before you sign up.

What you can do too

Give each person their own login and PIN
Limit refunds and tip edits to managers
Remove staff access on their last day
Export a copy of your data each month

Security questions, answered.

Salon ownerIs GetSpaPOS secure?

GetSpaPOS
GetSpaPOS runs on hosted servers over encrypted connections, with automatic backups, role-based permissions and an activity history. We do not claim PCI, SOC 2 or HIPAA certification; card data is handled by your payment processor, not stored by GetSpaPOS.
Salon ownerDoes GetSpaPOS store card numbers?

GetSpaPOS
No. Card payments are processed by your payment processor and card reader. GetSpaPOS records the payment result, not the card number.
Salon ownerWho owns my salon data?

GetSpaPOS
You do. We host it to run the software and never sell it. You can export it at any time.
Salon ownerWhat happens to my data if I cancel?

GetSpaPOS
You can export it for 30 days after cancellation. After that it is deleted from the live system and removed from backups as they rotate.
Salon ownerCan technicians see other technicians' pay?

GetSpaPOS
No. Each technician sees only their own sales, commission and tips unless you give them a manager role.
Salon ownerIs it suitable for medical records?

GetSpaPOS
No. GetSpaPOS is not a medical records system and makes no HIPAA claim. Med spas should keep clinical records in a dedicated system.
Salon ownerHow do I report a security issue?

GetSpaPOS
Use the contact form and choose "security" in your message, or see the data request page. We respond to security reports as a priority.
Salon ownerDo you use my clients' data for marketing?

GetSpaPOS
No. Your client list is used only to run your salon's account. The bundle's automations send messages only on your behalf, to your clients.

Keep reading

Questions about your data? Ask us.

Book a demo and bring your questions about hosting and access.

Start free trial Book a demo

14-day free trial. No card needed. Cancel any time.