Privacy Policy

GroomrLink ("we", "us", or "our") operates two connected products under the GroomrLink platform:

• The GroomrLink Dashboard: a web application used by salon and spa owners to manage appointments, staff, services, offers and multiple branches.
• The Branded Customer App: a white-labelled iOS and Android app published under each salon's own name, used by salon customers to browse services, book appointments and receive notifications.

This Privacy Policy applies to both products and explains what data we collect, why we collect it and how we protect it, whether you are a Salon Owner using the dashboard or a Customer using a salon's branded mobile app.

By using either product you agree to this policy. If you do not agree, please stop using the product.

If you are a Salon Owner: GroomrLink is the data controller for the information you provide when registering and managing your subscription.

If you are an App Customer: The salon whose app you have installed is the data controller for your personal information. GroomrLink acts as a data processor, handling your data only on the salon's behalf and under their instructions. If you have questions about how a specific salon uses your data, please contact that salon directly.

From Salon Owners (dashboard):

• Name, email address and phone number used to create your account.
• Business details: salon name, address and branch information.
• Operational data you enter: staff profiles, service menus, offers, customer records and booking history.
• Payment details collected by Razorpay when you subscribe (we do not store full card numbers).

From App Customers (branded mobile app):

• Name, phone number and email address provided during sign-up or booking.
• Booking history: services booked, dates, times, branch visited and assigned staff member.
• Profile information you optionally add, such as a display name or preferences.
• Push notification token, used solely to send you appointment reminders and offers from the salon.
• Device type and OS version, collected automatically for app compatibility.

Automatically from all users:

• IP address, browser or app version, pages or screens visited, and error logs, used to keep the service running reliably and to diagnose issues.

For Salon Owners:

• Create and manage your account and subscription.
• Process payments and issue invoices via Razorpay.
• Power the dashboard features: bookings, staff management, offers, notifications and reporting.
• Send transactional emails such as subscription confirmations and platform updates.
• Respond to your support requests.

For App Customers:

• Create your customer account and manage your bookings within the app.
• Send appointment confirmations, reminders and cancellation notices.
• Deliver push notifications for offers, loyalty updates and service announcements from the salon.
• Show your booking history and allow you to rebook past services.
• Enable the salon to provide personalised service recommendations.

We do not sell personal data, of salon owners or app customers, to any third party.

When you install a salon's branded app and grant notification permission, your device receives a unique push token via Firebase Cloud Messaging (FCM). This token is stored securely in our database and is used exclusively to send you notifications from that specific salon, such as:

• Appointment reminders and confirmations.
• Cancellation or rescheduling alerts.
• Special offers and promotions the salon chooses to broadcast.
• Loyalty reward milestones.

Your token is never shared with other salons or used for marketing unrelated to your booked salon. You can opt out at any time by disabling notifications for the app in your device's Settings, or by revoking permission within the app. If you uninstall the app, your push token is automatically invalidated.

Sign-in. App customers sign in using their phone number (OTP verification) or email address. We do not store passwords in plain text.

Deleting your account. You can request deletion of your customer account and all associated data at any time by contacting the salon through the app or emailing us at contact@groomrlink.in. We will process deletion within 30 days. Note that the salon may retain booking records in their own systems in line with their legal and tax obligations.

Updating your information. You can update your name, email and phone number directly from the app's profile screen at any time.

We share data only in the following circumstances:

• Firebase (Google). Used for authentication, real-time database, file storage and push notification delivery. Your data is stored in Firebase-managed infrastructure under Google's security standards.
• Razorpay. Processes subscription payments for salon owners. Razorpay's own privacy policy governs data shared with them during payment.
• Google AI (Gemini). Optionally used by salon owners to draft notification content via AI-assist. No customer personal data is sent to Gemini.
• The salon you booked with. As an app customer, the salon can view your profile, booking history and notification preferences within their dashboard. This is necessary to provide the booking service.
• Legal requirements. We may disclose data if required by law, court order or a regulatory body.
• Business transfers. In a merger or acquisition, data may transfer as part of that transaction under the same privacy commitments.

Salon Owners. Account and operational data is retained while your subscription is active and for 90 days after termination to allow data export. After that, it is permanently deleted unless law requires otherwise.

App Customers. Your profile and booking history is retained as long as your customer account exists with that salon. If you request account deletion, your data is removed within 30 days. Anonymised, aggregated booking statistics (with no personal identifiers) may be retained for analytics.

We implement industry-standard security measures including encryption in transit (TLS 1.2+), encrypted data storage, strict access controls and regular security reviews. Authentication uses Firebase's hardened auth infrastructure.

No system is perfectly secure. Salon owners are responsible for keeping dashboard credentials confidential. App customers should keep their phone or email account secure, as these are used to verify identity.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data (subject to legal retention obligations).
• Export your data in a portable format.
• Withdraw consent for processing where consent is the legal basis.

Salon owners can exercise these rights from the dashboard or by contacting us. App customers can update their profile in-app; for deletion or export requests, email contact@groomrlink.in. We will respond within 30 days.

Neither the dashboard nor the customer app is directed to children under 13. We do not knowingly collect personal data from children. If you believe a child has created an account or provided personal information, please contact us and we will delete it promptly.

Our infrastructure runs on Google Cloud and Firebase, which operate data centres in multiple regions globally. By using our products, you acknowledge that your data may be transferred to and processed in these regions. All such transfers are governed by Google's data-processing terms and applicable data protection laws.

We may update this policy from time to time. We will notify salon owners by email and in-dashboard notice, and app customers via an in-app notification, at least 14 days before material changes take effect. Continued use after changes take effect constitutes acceptance.

For any privacy questions, data requests or concerns:

GroomrLink
Email: contact@groomrlink.in
Response time: within 30 days