NeonO — All-in-One Salon & Spa Business Platform
Web SaaS (React + Supabase)
About
Multi-tenant SaaS that runs salons, barbershops and spas on one platform: online booking, staff scheduling, POS and payments, client CRM, marketing campaigns, reviews, an online store with supplier dropshipping, and an AI voice receptionist.
My Role
Senior engineer on the core platform with 700+ commits. Hardened the Postgres security layer (RLS policy sweeps across 79+ policies, revoked public EXECUTE on 83 SECURITY DEFINER functions, fixed auth.uid() re-evaluation timeouts), built the supplier dropship pipeline and the data-migration wizard, and added CI guardrails that block unsafe migrations before merge.
Core Capabilities
- Online booking, appointments and staff rota management across multiple locations
- POS, Stripe Connect payouts, gift cards, memberships and loyalty
- Supplier dropship pipeline with atomic order apply, short-ship refunds, a circuit breaker and SLA watcher alerts
- Data-migration wizard importing clients, CASL consent and staff rotas from legacy salon systems, with a post-run reconciliation report
- AI voice receptionist that books, reschedules and swaps services mid-conversation
- Colour Studio for hair-colour formulas, plus reviews, SMS inbox and marketing campaigns
Architecture
- Frontend: React + TypeScript + Vite, Tailwind, shadcn/ui, i18next
- Backend: Supabase Postgres with row-level security for tenant isolation, ~500 Deno edge functions, pg_cron scheduled jobs
- Payments: Stripe Connect; messaging via Twilio SMS
- Quality: 40+ GitHub Actions workflows (Vitest, Playwright E2E QA gate with negative-permission tests, RLS sentinel checks), Sentry monitoring, Vercel deploys