Privacy Policy

Effective October 19, 2026

1. Who we are

Contour Metrics ("Contour", "we", "us") provides analytics software for med spas and similar practices. This policy explains what information we collect, how we use it, and the choices you have. It applies to our website at contourmetrics.com, the Contour app, and related services (together, the "Service").

2. Information we collect

Information about people who use Contour

When you or your practice set up an account, we collect your name, work email address, practice name, and login details. We also collect basic usage information, such as when you sign in and which pages you view, so we can keep the Service secure and working well.

Practice data

To produce your reports, the Service processes data your practice provides or authorizes us to retrieve ("Practice Data"). This can include:

• Reports and exports from your practice management or booking software, such as sales, appointments, packages, payments and staff records.
• Accounting data from QuickBooks or from accounting files you upload, such as transactions, accounts and reports.
• Data retrieved automatically from software your practice uses, using access or credentials your practice provides.
• Settings and answers your team enters in Contour.

Practice Data may include information about your practice's own clients. We process that information only on your practice's behalf and only to provide the Service. Your practice is responsible for having the right to share it with us.

Information from our website

If you request access or contact us, we collect the details you send, such as your name and email address.

3. How we use information

• To provide the Service: reading your data, computing figures and reports, and showing them to your team.
• To check accuracy, including running independent checks on the figures we produce.
• To support you, respond to questions, and tell you about changes to the Service.
• To keep the Service secure and to prevent misuse.
• To meet legal obligations.

We do not sell personal information or Practice Data. We do not use it for advertising, and we do not share it with data brokers.

4. QuickBooks and other connected accounts

If your practice connects QuickBooks or another account to Contour:

• We request read-only access to the data the Service needs, such as transactions, accounts and financial reports. We do not change anything in your accounting software.
• We use that data only to provide the Service to your practice.
• Access tokens and any credentials you provide are stored encrypted and are used only to retrieve your practice's data.
• You can disconnect at any time, from within Contour or from the connected service. When you disconnect, we stop retrieving data. You can also ask us to delete data we already retrieved (see section 8).

5. Text messaging

If text messaging is enabled for your practice, Contour may send text messages on your practice's behalf to people who have agreed to receive them.

• Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes.
• Text messaging opt-in data and consent will not be shared with any third parties, except service providers that deliver the messages on our behalf.
• Recipients can reply STOP to stop receiving messages, or HELP for help. Message and data rates may apply.

6. How we share information

We share information only in these cases:

• Service providers that help us run the Service, such as cloud hosting, data storage, email delivery, text message delivery, and AI processing. They act on our instructions, under contract, and may not use the data for their own purposes.
• Within your practice, with the users your practice authorizes.
• Legal reasons, when required by law, or to protect the rights, safety or security of our users, the public or Contour.
• Business transfers, if Contour is involved in a merger, acquisition or sale of assets. This policy would continue to apply to the information transferred.
• With your consent, for any other purpose.

7. Security

We protect information with encryption in transit and at rest, access limited to the people who need it, and encrypted storage for credentials and access tokens. No system is perfectly secure, so we cannot guarantee absolute security, but we work to protect your information and will notify affected customers of a security incident as required by law.

8. Retention and deletion

We keep Practice Data for as long as your practice has an account, so your history and reports stay available. If your practice closes its account or asks us to delete its data, we will delete Practice Data within 30 days, except for copies we must keep to meet legal obligations. Data in backups is removed as the backups expire.

To request deletion, email nate@contourmetrics.com.

9. Your choices and rights

You can ask to see, correct or delete personal information we hold about you. Depending on where you live, you may have additional rights under state privacy laws. To make a request, email us at the address below. If you are a client of a practice that uses Contour, please contact that practice first, since it controls the data it shares with us. We will help them respond.

10. Health information

Some Practice Data may relate to treatments or services. Where a practice is subject to HIPAA and we have signed a business associate agreement with it, that agreement also governs how we handle protected health information.

11. Children

The Service is for businesses and is not directed to children. We do not knowingly collect personal information from children under 13 through our website or app.

12. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify customers by email or in the Service before they take effect. The effective date at the top shows when it was last changed.

13. Contact us

Contour Metrics
Chicago, Illinois
nate@contourmetrics.com