Privacy policy

Three kinds of people use SalonOS, and this policy covers all of them:

• Salon owners and their staff - the people who run a salon on our software.
• Salon customers - people who book an appointment at a salon that uses our software.
• Visitors to this website - anyone reading these pages or sending us an enquiry.

This matters, because it decides who you should ask when you want something changed or deleted.

For a salon's own account - the salon name, the owner's details, the staff logins, the subscription - we decide how that information is used. We are responsible for it.

For a salon's customer records - the bookings, phone numbers, visit history and payments belonging to that salon's customers - the salon decides. We only store and process that information on the salon's instructions. The salon is responsible for it.

So if you are a customer of a salon and want your record corrected or removed, ask the salon. They can do it themselves inside the software. If they do not respond, write to us and we will help.

Only what the software needs to do its job. Nothing is bought from anyone else.

From salon staff

• Name, mobile number and email address.
• A password, stored only as an irreversible hash. We never see it and cannot recover it.
• Job role, working hours, leave, skills and commission settings.
• A record of actions taken inside the salon - who booked, changed, cancelled or billed what, and when.

From salon customers

• Name and mobile number. These are required to make a booking.
• Email address, gender, date of birth and address, if the customer or the salon chooses to add them.
• Appointment history, including services taken, which stylist, and when.
• Payments, invoices, memberships, prepaid packages and loyalty points.
• Notes the salon keeps about preferences, and any review the customer leaves.

Automatically

• The IP address and browser or device type of a sign-in, kept so an account can be checked for unusual access.
• A device token if push notifications are switched on, used only to deliver them.

We do not collect card numbers. Salon payments are recorded as cash, UPI, card or bank transfer after the money has already been taken. We store the method and any reference number the salon types in, never the card details themselves.

• To run the booking diary, send reminders and keep the salon working.
• To produce invoices, and to keep the tax records Indian law requires.
• To sign people in, and to send a password reset link when one is asked for.
• To tell people what they asked to be told - a booking confirmed, a time moved, an appointment tomorrow.
• To show a salon its own reports.
• To answer support enquiries, and to bill salons for their subscription.
• To keep the service secure, and to look into misuse.

We do not sell personal information, and we do not use it to advertise anything to you on behalf of anyone else.

A salon's customers receive messages about their own bookings - a confirmation, a reminder, a request to move a time, an invoice. These are part of the service and are sent because the customer made a booking.

A salon may also send offers to its own customers. That is the salon's decision and the salon's responsibility. Ask the salon to stop, and they can.

Password reset links are always sent when somebody asks for one, because they are how an account is recovered.

A small number of companies help us run the service. They may only use the information to do that job, and nothing else.

We also share information when the law requires it, or to protect someone from harm. If the business is ever sold or merged, information may transfer with it, and you will be told before that happens.

Information is stored on servers operated by the providers above. Where those servers are outside India, the provider is required by contract to protect the information to the same standard as this policy.

Under the Digital Personal Data Protection Act, 2023, you may:

• Ask what information about you is held, and get a copy.
• Ask for anything wrong to be corrected.
• Ask for information to be deleted, where we are not required to keep it.
• Withdraw consent you previously gave.
• Nominate somebody to act for you if you die or cannot act for yourself.
• Complain, first to us and then to the Data Protection Board of India.

If you are a salon customer, the quickest route is to ask the salon - they can change or delete your record themselves. Otherwise write to us at the address in section 12 and we will answer.

A customer using our app can also delete their own account from the Profile screen. Doing so removes the personal details from the salon's customer list, but invoices already issued are kept for the period tax law requires.

• Every connection is encrypted in transit.
• Passwords are stored as irreversible hashes, never as text.
• Each salon's data is separated at the database level, so one salon can never read another's.
• What each member of staff can see is limited by their job role.
• Sign-in sessions expire, and setting a new password signs out every other device.

No system is perfectly safe. If a breach occurs that puts someone at risk, we will tell those affected and the Data Protection Board of India as the law requires.

SalonOS is not meant for children under 18. A parent or guardian may book an appointment for a child, in which case the salon holds only what is needed for that appointment.

Write to us about anything in this policy, including a request about your own information:

Grievance Officer
Sensussoft Software Pvt. Ltd.
Surat, Gujarat, India
info@sensussoft.com

We answer within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.

If this policy changes, the new version appears on this page with a new date at the top. Where a change matters, we will also tell salon owners inside the software.

See also our terms and conditions.