Skip to content
Salonava

Privacy policy

Last updated 29 September 2026

Draft

This document is a working draft and is being reviewed. The final version will be published before bookings open.

1. Who we are

Salonava runs an appointment booking platform that connects customers with salons, and provides salons with tools to manage their business. This policy explains what personal data we collect, why, and the choices you have. It is written with India's Digital Personal Data Protection Act, 2023 in mind.

2. What we collect

When a salon partner signs up and lists a salon we collect:

  • Account details: name, email address, mobile number and a hashed password.
  • Business details: salon name, type, team size, contact details, address, map location and hours.
  • Tax identifiers you choose to give us, such as GSTIN and PAN.
  • Your service menu with prices and durations.
  • Payout details: account holder name, account number, IFSC and UPI ID.
  • Verification documents: owner ID proof, business proof, bank proof, and salon photos and logo.

We also record technical data such as IP address, device and browser type, and a log of security-related actions (for example sign-ins and changes to bank details).

3. How we use it

  • To create and secure your account, including sending one-time codes by email or SMS.
  • To verify your salon and your identity before your listing goes live.
  • To show your public profile (name, photos, logo, address, hours and services) to customers.
  • To settle customer payments to your bank account.
  • To send you service messages about bookings, verification and your account.
  • To prevent fraud and abuse, and to meet legal and tax obligations.

4. Who we share it with

We share data only with service providers who help us run Salonava, such as SMS, email and payment providers and our hosting provider, under contracts that limit their use of it. Customers see only your public profile. We do not sell personal data.

5. How we protect it

Passwords are hashed. Bank account numbers are encrypted at rest and only the last four digits are ever shown back. Verification documents are stored privately and are visible only to you and our verification team. All traffic uses HTTPS, access is role-based, and sensitive actions are recorded in an audit log.

6. How long we keep it

We keep your data while your account is active and for as long as the law requires afterwards, for example for tax records. Unverified sign-ups are removed if the mobile number is never confirmed.

7. Your rights

You can ask to access, correct or erase your personal data, withdraw consent, or nominate someone to act for you. Write to mysalonava@gmail.com and we will respond within the time the law sets.

8. Changes to this policy

If we make material changes we will tell partners by email or in the app before they take effect.