Privacy Policy

Scope of This Policy

This policy applies to website visitors, salon owners, branch managers, staff members, and users of the mobile app or web dashboard. If a salon enters client or staff data into the system, the salon is responsible for having a lawful basis to collect that data and for notifying the relevant individuals where required.

Data We Collect from Account Users

• Identity and contact data such as name, mobile number, email address, role, and account photo if added.
• Sign-in and session data such as access tokens, session status, device used, sign-in time, IP address, and security logs.
• Usage preferences such as language, light or dark mode, calendar settings, list ordering, and notification choices.

Salon, Client, and Staff Data

• Salon and branch data such as business name, address, contact numbers, currency, tax settings, business hours, and services.
• Client data entered by the salon, such as name, mobile number, notes, bookings, payments, invoices, and transaction history.
• Staff data such as name, mobile number, role, schedules, leave, attendance, payroll, commissions, and documents uploaded in the HR area.
• Appointment and invoice data such as service, staff member, time, status, discounts, tax, payment method, paid amounts, and remaining balances.

Mobile, Web, and Permission Data

• The mobile app or browser may use device identifier, device type, operating system, app or browser version, and crash logs to improve security and support.
• We may request notification permission to send booking alerts, reminders, status updates, and operational notifications. You can disable them in your device or browser settings.
• The app or browser may request access to camera or files only when a feature requires it, such as uploading a document or image or scanning a QR code. These permissions are not used outside the purpose you approved.
• We use local storage and cookies to keep the session, language, display settings, connectivity state, and device identifier.

How We Use Data

• To provide system features such as appointments, clients, services, staff, invoices, reports, attendance, payroll, and notifications.
• To verify identity, manage sessions, protect accounts, prevent unauthorized access, and detect abusive use.
• To provide support, diagnose errors, improve performance, and enhance the web and mobile user experience.
• To send operational notifications or messages requested by the salon, such as appointment reminders, payment notices, or service updates.
• To comply with legal, tax, accounting, security, or authority requests where applicable.

AI Assistant and Automated Features

If you use AI features, prompt content and outputs may be processed to perform tasks such as searching, summarizing data, drafting messages, or helping users inside the system. Do not enter unnecessary or highly sensitive information into the chat unless operationally needed and permitted by your role.

Data Sharing and Service Providers

• We do not sell personal data or rent it to marketing parties.
• Data may be shared with service providers needed to operate the system, such as hosting, database, notifications, messaging, email, payment, support, or operational analytics providers.
• We may disclose data when required by law, an authority order, to protect our rights, prevent fraud, or protect users.
• If the salon uses an external integration such as WhatsApp, SMS, or a payment provider, data may also be subject to that provider's policies.

Processing Location and Transfers

Data may be processed on our servers or by infrastructure and operational providers we use to deliver the service. When data is transferred or made available outside the country where the user or salon is located, we apply appropriate safeguards under applicable laws.

Retention and Deletion

• We keep data for the duration of account use or as needed to provide the service and maintain operational records.
• Some records may be kept longer for legal, tax, accounting, or security reasons.
• You may request account deletion or deletion of certain data, and we will complete the request where legally permitted and where it does not conflict with retention obligations or the rights of others.
• Backups may remain for a limited period until replaced or deleted under the backup cycle.

Data Security

• We use appropriate technical and organizational controls such as permission controls, isolation of each salon's data, session monitoring, and protected communications.
• Users must keep sign-in details confidential and must not share accounts with unauthorized persons.
• Although we apply safeguards, no electronic transmission or storage method is completely secure, so we work to reduce risk and review protections continuously.

Your Rights

• You may request access to, correction, update, or deletion of your personal data where applicable.
• You may request restriction of certain processing or object to it where permitted by law.
• You can withdraw consent for notifications or non-essential communications through device or system settings.
• We may need to verify your identity and authority before completing a request, especially where it concerns salon, client, or staff data.

Children's Data

The system is intended for salon management by business owners and their staff, and is not directed to children. If a salon enters data relating to a minor client, the salon is responsible for obtaining any required approvals and handling it under applicable laws.

Changes to This Policy

We may update this policy when system features, data practices, or legal requirements change. The updated version will be posted on this page with the last updated date.