Privacy Policy

Salones connects customers with independent salons. This policy covers the Salones customer app, the Salones salon owner app and the QR walk-in booking website. The data controller is Salones (“we”, “us”). Contact: 7alonbooking@gmail.com.

Customers

• Name, phone number (used for one-time-code sign-in and booking verification) and optionally an email address and profile photo.
• An account identifier from Google or Apple if you sign in with them. We never receive your password for those services.
• Bookings: salon, services, staff, date and time, status, payment method and an optional cancellation reason.
• Location: when you search for nearby salons, your device coordinates are sent to our server for that search. We do not keep a location history.
• A push notification device token.

Salon owners

• Name, email, phone number and profile photo.
• Business details: salon name, category, description, address, city, map coordinates and opening hours.
• Photos you upload of your salon, staff and services, plus your service catalogue and staff profiles.
• Payout details (account holder name, UPI ID, or bank name, IFSC and account number) so you can be paid. The app only ever shows you the last four digits of an account number.
• The bookings made at your salon, including the customer name, phone and notes needed to serve them.
• A push notification device token.

QR walk-in booking website

• Name and phone number to book, a one-time code to verify the phone, and a strictly necessary session cookie while you are verified. We do not use advertising cookies.

Technical data

• Basic diagnostics and app-usage statistics (such as crashes, app version and device type) collected through Firebase, and standard server logs (IP address, request time) used for security and rate limiting. This website also uses aggregate page analytics from Vercel.

• To create and secure your account and verify it is you.
• To show salons, take bookings and share booking details (customer name, phone, services, time) with the salon you book.
• To send booking updates and reminders as push notifications.
• To show nearby salons and to place a salon on the map.
• To pay out salon owners and to keep financial and booking records.
• To review new salons before they go live, prevent abuse and keep the service reliable.

We do not sell your personal data and we do not use it for advertising. The following providers process data on our behalf:

• Supabase: sign-in, one-time codes and our database.
• Cloudflare R2: storage of uploaded images such as profile, salon, staff and service photos.
• Google Firebase Cloud Messaging: delivery of push notifications (receives your device token and the notification text). Firebase also provides the diagnostics described above.
• Upstash (Redis): short-lived counters and caches used for rate limiting and abuse protection.
• Google and Apple: only if you choose to sign in with them.
• Vercel: hosting and aggregate analytics for this website.

Your booking details are shared with the salon you book with, and a salon owner’s business details and photos are visible to customers. We may disclose data if required by law.

Data travels over HTTPS/TLS. Access to each account’s data is restricted to that account and, where needed to run a booking, the salon concerned. Payout details are held in our access-controlled database and are never shown in full after you save them. No system is perfectly secure, so please keep your sign-in methods private.

You can delete your account at any time in the app (Settings) or on the web at /account-deletion. Deletion is permanent and has no grace period.

Erased: your sign-in identity and sessions, name, phone, email and profile photo, notifications and device tokens, and uploaded photos. For owners also the salon’s address, description, QR code, payout details and holidays.

Retained without your identity:

• Booking history, so salons and other customers keep their records. A deleted customer appears as “Deleted customer” with phone, notes and reasons cleared.
• Payment and refund records (amounts, dates and reference numbers) for accounting, detached from your identity.
• An anonymous deletion record (role, status, timestamps).
• Backups and provider logs until they expire on their own schedule.

When a salon owner deletes their account, the salon is closed, upcoming bookings are cancelled, the affected customers are notified and any online payment is refunded to the original payment method. Cash paid directly to a salon is not refunded by the platform.

Depending on where you live you may have the right to access, correct, delete, export or object to our use of your personal data. You can edit your details in the app and delete your account as above. For anything else email 7alonbooking@gmail.com; we aim to reply within 30 days.

Salones is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.

We will update this page when our practices change and show the new effective date above. Questions: 7alonbooking@gmail.com.