Privacy Policy

Salon Success ("we", "us") provides salon management software — appointments, billing, staff, inventory and lead management — to beauty salons and academies ("Salons"). This policy explains what personal data the software handles, why, and the choices you have. It applies to salonsuccess.in and every salon's own address on it (for example yoursalon.salonsuccess.in).

Who is responsible for your data

We follow India's Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 (together, the "DPDP law").

• Each Salon is the "Data Fiduciary" for the data about its customers, staff and enquiries. It decides what to record, and is responsible for telling people why their data is collected and getting their consent where needed.
• Salon Success is the "Data Processor"for that data. We store and process it only on the Salon's instructions, only to run the service for that Salon, and keep it secure.
• Salon Success is the Data Fiduciary for its own data — for example, the details of salon owners who contact us or sign up.

If you are a customer of a Salon and have a question about your data, you can contact the Salon directly, or write to us and we will pass it on and help.

What we collect

• Salon staff accounts: name, email, phone, role, branch, and — where the Salon uses these features — attendance, roster, salary and payroll details.
• Salon customers: name, phone number, visit and appointment history, services and products bought, bills and payments, memberships, and any notes or photos the Salon records.
• Enquiries (leads):name, phone number and details of the enquiry, entered by the Salon or received from the Salon's advertising, as described below.
• Website enquiries:the name, mobile number and salon name you enter in the "free consultation" form on salonsuccess.in. We use these only to contact you about Salon Success.
• Technical data: login sessions, and push-notification subscriptions for staff who turn notifications on.

Facebook and Instagram lead ads

A Salon can connect its own Facebook Page to Salon Success. When it does, and someone submits a lead form on that Salon's Facebook or Instagram ad, Meta sends us that form submission so it appears in the Salon's lead list. From Meta we receive:

• the answers given in the lead form (typically name, phone number, email, and any questions the Salon added to the form);
• the name of the ad and form, and whether it came from Facebook or Instagram;
• the name and ID of the Salon's Facebook Page, and an access token that lets us fetch that Page's lead-form submissions.

We use this data only to create the enquiry in that Salon's account. We do not use it for our own marketing, do not sell it, and do not share it with any other Salon or third party. Page access tokens are stored only on our servers and are never shown in the app. A Salon can disconnect its Page at any time from Settings, which stops new leads; it can also remove the connection completely in its Facebook settings (Business Integrations).

WhatsApp messages

A Salon can also connect its own WhatsApp Business number. When someone who is not already the Salon's customer or enquiry messages that number, Meta sends us the message so the enquiry appears in the Salon's lead list. We receive the sender's WhatsApp number and profile name, the message, and — if they came from one of the Salon's Click-to-WhatsApp ads — which ad it was.

We save only the first message as a note on the new enquiry. Messages from the Salon's existing customers, and ordinary conversation with existing enquiries, are not stored by Salon Successat all. We never send WhatsApp messages on a Salon's behalf without its instruction. The Salon can disconnect its number at any time from Settings.

How we use data

• to provide the software to the Salon and its staff — bookings, billing, reports, notifications and lead follow-up;
• to keep accounts secure, prevent misuse, and fix problems;
• to send service emails such as login and password-reset messages.

We do not sell personal data and do not show advertising in the software.

Who we share it with

Only the service providers we need to run the software, each bound to use the data solely for that purpose:

• Supabase — database, file storage and login;
• Vercel — web hosting;
• Resend — sending service emails;
• Meta Platforms — only when a Salon connects its Facebook Page or WhatsApp number, as described above.

These providers may store data on servers outside India, as permitted by the DPDP law. We may also disclose data where required by law.

Security

Data is sent over encrypted connections (HTTPS). Each Salon's data is kept separate at the database level, so one Salon can never see another's. Within a Salon, staff only see what their role allows. Access keys for connected services (such as Facebook) are kept only on our servers.

If a personal data breach ever happens, we will inform the affected Salons without delay, and — as the DPDP law requires — the Data Protection Board of India and the people affected, with what happened, its likely impact, and what we are doing about it.

How long we keep it

We keep a Salon's data for as long as the Salon uses Salon Success. When a Salon closes its account, we delete its data within 90 days, except where we must keep records (such as invoices) for legal or tax reasons. Where the DPDP Rules require it, we keep records of how personal data is processed for at least one year.

Your rights and deleting your data

Under the DPDP law, you have the right to:

• get a summary of the personal data held about you and how it is used;
• have it corrected, completed or updated;
• have it deleted when it is no longer needed, unless another law requires it to be kept;
• withdraw consent you have given, as easily as you gave it;
• nominate someone to use these rights for you if you die or are unable to;
• raise a complaint with us, and if you are not satisfied, with the Data Protection Board of India.

We will respond to every request within 30 days. How to ask:

• If you are a Salon's customer or filled in a Salon's lead form: ask the Salon, or email us at admin@salonsuccess.in with your name, phone number and the Salon's name. We will work with the Salon to delete your data within 30 days and confirm by email.
• If you are a Salon connecting Facebook: disconnect your Page in Salon Success Settings and remove the app in your Facebook Business Integrations settings. To also delete the leads already received, email us and we will delete them within 30 days.

Children

Salon Success is a business tool for Salons and is not directed at children. Under the DPDP law, anyone under 18 is a child: a Salon that records data about a customer or student under 18 must first get verifiable consent from a parent or guardian.

Changes to this policy

If we make significant changes, we will update the date at the top of this page and let Salons know in the app.

Contact and grievances

For questions, requests or complaints about personal data, contact our Grievance Officer at admin@salonsuccess.in or +91 84313 37319. We will respond within 30 days.

Salon Success
No 1198, 16th Main, BTM Layout Stage 2, Bangalore 560076