Privacy Policy

1. Data we collect

You provide: name, mobile number, email, profile photo, and — for partners — business name, address, GSTIN and bank account details for payouts. Generated by use: bookings, queue tokens, reviews, invoices and ledger entries. Technical: device, app version, IP address and cookies. Location: approximate or precise location, only with your permission, to show nearby salons. Payments: transaction metadata; full card numbers are handled by our PCI-DSS compliant payment providers, not stored by us.

2. How we use your data

We use your data to create and secure your account; show relevant salons and slots; process bookings, the live queue, payments, GST invoices and payouts; provide support and resolve disputes; send transactional and service messages (including OTP, booking confirmations and reminders via SMS, WhatsApp, push and email); prevent fraud and abuse; and improve and operate the Platform. We send marketing only where you have opted in, and you can opt out at any time.

3. Legal bases & consent

We process data based on your consent, the performance of our contract with you (for example, to fulfil a booking), our legitimate interests in operating and securing the Platform, and our legal obligations (such as tax and accounting). You may withdraw consent for optional processing at any time; this will not affect processing already carried out, and some features may stop working without the relevant data.

4. How we share data

We share booking and contact details with the Partner you book, so they can deliver the service. We share data with service providers acting on our behalf — payment gateways, OTP/SMS and WhatsApp providers, maps, KYC verification, cloud hosting and analytics — under contracts that limit their use of it. We may disclose data where required by law or to protect rights and safety. We do not sell your personal data.

We enforce strict tenant separation: a Partner can only access data relating to its own bookings and customers, never another business's data.

5. Data retention

We keep personal data only as long as needed for the purposes above or as required by law. Transaction and tax records — including ledger entries and GST invoices — are retained for the period required under Indian tax and accounting rules (generally up to 8 years). When data is no longer needed, we delete or anonymise it. Note that the financial ledger is append-only: where erasure conflicts with mandatory record-keeping, we retain the minimum required and restrict further use.

6. Your rights

Subject to applicable law, you can access and correct your data, withdraw consent, request deletion, object to or restrict certain processing, and request a copy of your data in a portable form. You can manage much of this directly in your account settings, or by contacting our grievance officer. We respond within the timelines required by law and may verify your identity before acting on a request.

7. Security

We use encryption in transit, access controls, host-only session cookies, idempotent payment handling and regular reviews to protect your data. No system is perfectly secure, but we work to limit risk and will notify you and the authorities of a reportable breach as required by law.

8. Cookies & tracking

We use essential cookies to keep you signed in and the Platform working, and limited analytics to understand usage and improve the product. You can control non-essential cookies through your browser or device settings.

9. Children

The Platform is intended for users aged 18 and above. We do not knowingly collect data from children without parental consent; if you believe a child has provided us data, contact us and we will delete it.

10. Changes & contact

We may update this policy as the Platform and the law evolve; material changes will be notified in-app or by email. For privacy questions or to exercise your rights, contact our grievance officer via the contact page. We aim to acknowledge requests promptly and resolve them within the statutory timelines.