Privacy Policy

Salon customers: when you book, take a queue token or message a salon, that salon decides how it uses your details for its own business (it is the “data fiduciary”). SalonOS processes the data on the salon's behalf to provide the service.

Salon owners and staff: for your SalonOS account, subscription and use of the platform, TATOS Technologies is responsible for your data.

• Account details: mobile number (used to sign in with a one-time code), name, and optionally email.
• Bookings & visits: services chosen, date and time, stylist, notes you add, queue tokens, pass numbers, visit history, reviews you leave and salons you save.
• Salon information (entered by owners): salon name, address, location pin, hours, services and prices, staff names and photos, gallery photos and videos, and page settings.
• Customer records kept by salons: customer names, phone numbers, notes and tags a salon adds, and call summaries from the AI receptionist (where the salon uses it).
• Messages: delivery status of booking confirmations, reminders and login codes sent by WhatsApp or SMS.
• Technical data: sign-in cookies and tokens that keep you logged in, basic logs (IP address, device and browser type, time of request) used for security and troubleshooting. We don't use advertising trackers.
• Location (owner app only, if you allow it): used once to pin your salon on the map. We don't track your location.
• Photos & camera (owner app only, if you allow it): only the photos or videos you choose to upload.

• To sign you in and keep your account secure.
• To make, change and cancel bookings, run the live queue, and show your passes and tokens.
• To send service messages: login codes, booking confirmations, reminders, reschedule/cancel notices and “you're up next” alerts.
• To publish a salon's public page (salon details, services, staff, gallery and reviews) so customers can find and book it.
• To provide support, prevent fraud and abuse, and fix problems.
• To bill salons for their SalonOS plan.

We don't sell personal data, and we don't send marketing messages to salon customers on our own behalf.

• WhatsApp: messages are sent through the official WhatsApp Business Platform by Meta. When a salon connects its own WhatsApp Business number, messages come from that salon's number; otherwise they come from the SalonOS number. Meta processes message content and delivery data under its own terms and privacy policy.
• SMS login codes: if a code can't be delivered on WhatsApp, it is sent by SMS through Google Firebase Authentication, which receives your phone number for this purpose.
• Instagram: if a salon connects its Instagram Business or Creator account, we read its profile and recent posts (read-only) to show them on the salon's page. We never post on the salon's behalf. The salon can disconnect at any time, which deletes the stored access and posts.

• The salon you book with sees your name, phone number, bookings, visit history and notes for its own customers.
• Service providers that host or deliver SalonOS for us, bound by contract to protect the data: cloud hosting and database (Railway), file storage, Meta (WhatsApp and Instagram), Google (Firebase SMS login and Google sign-in), Apple (Sign in with Apple, if used), and our payment provider for salon subscriptions.
• Legal reasons: when required by law, a court order, or to protect the rights and safety of people and the service.

Some of these providers may process data outside India, with appropriate safeguards.

• Account data: while your account is active, and deleted on request (see below).
• Booking and visit records: for as long as the salon keeps its SalonOS account, or until deleted on request, so the salon can see your history.
• Login codes: expire after 5 minutes; the record is removed shortly after.
• Security logs: up to 90 days. Database backups: up to 14 days.

Under India's Digital Personal Data Protection Act, 2023 and other applicable laws, you can ask to access, correct, update or erase your personal data, withdraw consent, and nominate someone to exercise these rights for you. You can update your name in your account; for anything else, contact us or the salon you booked with. We'll respond within 30 days.

To delete your SalonOS account and personal data:

• Email privacy@salonos.link from any address with the subject “Delete my data” and include the mobile number you use with SalonOS. We'll confirm by a code sent to that number, then delete your account, bookings history, saved salons and notifications within 30 days.
• Salon owners: to close a salon and delete its data (including Instagram and WhatsApp connections), email us from the owner's number or ask in the app. Disconnecting Instagram or WhatsApp in the app removes those connections immediately.

Some records may be kept longer where the law requires it (for example, billing records).

Data is sent over encrypted connections (HTTPS). Access tokens for connected services (Instagram, WhatsApp) are stored encrypted. Staff access within a salon is limited by role. No system is perfectly secure, but we work to protect your data and will notify you and the authorities of a breach as the law requires.

SalonOS isn't meant for children under 18 to use on their own. A parent or guardian may book on a child's behalf.

We may update this policy. We'll change the date above and, for important changes, let you know in the app or on the website.

TATOS Technologies
Email: privacy@salonos.link

Grievance Officer: you can raise any privacy concern or complaint at the email above; we'll acknowledge within 48 hours and resolve it within 30 days. If you're not satisfied, you may approach the Data Protection Board of India.