Privacy policy

• If you are a salon's client (you booked, paid or were added by a salon): that salon decides what it records about you and why, and is responsible for it. We process that data on the salon's instructions to run the software.
• If you use Salon IQ at work (an owner or team member): we are responsible for your account data (name, email or username, sign-in records).

• Contact details: name, mobile and WhatsApp number, and, if given, email, birthday and gender.
• Visits: services, stylist, appointment times, and notes or tags the salon adds.
• Health and consent form: if a treatment needs one, the answers you give about allergies, skin, medications, pregnancy and health conditions, and your typed signature. Only the salon's managers and the therapists who treat you can read it. Its answers are erased with the rest of your details if you ask the salon to erase them.
• Bills and payments: what was bought, amounts, payment method and references. Card and bank details are entered with Razorpay and never reach Salon IQ.
• Prepaid value: memberships, packages, gift cards and loyalty points.
• Messages: WhatsApp messages between you and the salon, and any review you leave.
• Whether you agreed to offers, and when that last changed.

• To book, remind you of and run your appointments, and to bill you.
• To send booking confirmations, reminders, receipts and review requests about your own visits.
• To send offers, but only if you agreed to them. Agreeing is never pre-ticked. Reply STOP to the salon on WhatsApp, or tell the salon, to stop offers at any time; booking messages continue.
• To keep the service secure, find faults, and meet legal duties such as keeping tax invoices.

We don't sell personal data. These providers process it to run Salon IQ:

• Supabase: database, sign-in and file storage.
• Vercel: hosting the website and app.
• Razorpay: online payments, when a salon uses them.
• Meta (WhatsApp Business Platform): WhatsApp messages, when a salon connects WhatsApp.
• Sentry: error reports, set not to collect personal data by default.
• PostHog: product usage analytics for people using the app at work.

Some of these providers may store data outside India.

• Client records are kept while the salon uses Salon IQ, unless the client asks for them to be erased.
• Bills and payment records are kept for as long as Indian tax law requires, even after erasure; they then no longer show the client's name or contact details.
• When a salon closes its account, we return its data on request and then remove it.

• Access: get a copy of the data a salon holds about you.
• Correction: have wrong or out-of-date details fixed.
• Erasure: have your personal details removed, except what the law requires a salon to keep.
• Withdraw consent to offers at any time.
• Nominate someone to use these rights for you.

Ask the salon first: they can do all of this in Salon IQ. If they don't respond, or your question is about Salon IQ itself, contact our grievance officer below. If you are not satisfied with our answer, you may complain to the Data Protection Board of India.

Data is encrypted in transit, each salon's records are separated by access rules enforced in the database, and staff see only what their role allows. If a breach affects your data, we will tell the salon and, as the law requires, the Data Protection Board and the people affected.

Alan Philip, IQ Nexhaz Global LLP
Email: mail@nexhaz.com
Phone: +91 94972 78250