Public Architecture Overview

Purpose of this page

This is a safe, high-level view of how AllSalons works. It describes the major components and data flows without exposing internal endpoints, thresholds or configuration details. Detailed internal architecture and operational documentation are restricted to platform staff.

The application

• A standard web application served over HTTPS; your browser runs the interface and talks to managed backend services.
• Authentication (accounts, sessions, password reset) is handled by the platform's managed authentication — passwords are never stored by the application.
• Data lives in a managed database where every record type carries server-enforced access rules: customers see only their own bookings, saves and searches; business owners only their claimed salon; staff-only records require a staff role.

Server functions and discovery

• Search enrichment: when you search, server-side functions look up real businesses via Google Places and web search, automatically adding qualifying results to the directory (tagged 'Newly added') with an evidence record of their source.
• Geocoding: locations you type are resolved to coordinates via OpenStreetMap's public geocoding service.
• Booking, review and consultation workflows run through server functions that enforce permissions and moderation rules.

Payments

Checkout is provided by Base44 Payments. Your card details are entered on the payment provider's hosted checkout and never reach our systems. We keep a purchase record (product, amount, status) and grant what you bought when the provider confirms payment; subscription cancellations and expirations revoke access automatically.

Automated jobs

• Nightly: expire booking requests pending more than 14 days.
• Nightly: expire sponsored placements whose 30-day window has ended.
• Nightly: data-quality sweep — backfill missing listing details from authoritative sources and flag suspected duplicates.
• Weekly: email users a digest of new salons matching their saved searches.

Where AI is used

• Listing discovery (searching public sources for real businesses), the Consumer Concierge, read-only business and staff copilots, and risk-tiered editorial assistance with human review for high-risk topics. See our Transparency page for the full disclosure.

Monitoring and operations

Platform staff monitor an internal health dashboard and the automated jobs listed above. Automated external alerting is planned but not yet in place — we say so rather than overstate. See the Security page for what is verified versus self-reviewed.