SalonFirst
Sign in

Legal

Privacy Policy

Last updated: 8 May 2026

1. Who We Are

SalonFirst is a salon and spa management platform that helps salon owners capture leads, manage bookings, and communicate with customers via WhatsApp. For questions about this policy, contact us at rajeshyou@gmail.com.

2. Data We Collect

We collect the following categories of data:

  • ·Account data — Name, email address, and phone number of salon owners and staff who register on SalonFirst.
  • ·Salon data — Business name, services offered, and staff profiles entered by the salon owner.
  • ·Customer data — Names and phone numbers of the salon's clients, entered by salon staff or captured via booking forms.
  • ·WhatsApp message data — Message content and delivery status for booking reminders and marketing campaigns sent on behalf of salons.
  • ·Facebook Lead Ads data — Name, phone number, and form responses submitted via Facebook or Instagram lead forms connected to a salon's account.
  • ·Usage data — Pages visited and features used within the platform. We do not use third-party advertising or tracking scripts.

3. How We Use Your Data

  • ·Delivering and improving the SalonFirst platform (CRM, bookings, campaigns).
  • ·Sending WhatsApp notifications and marketing campaigns on behalf of salons, with customer consent.
  • ·Capturing and routing leads from Facebook and Instagram Lead Ads to the relevant salon's CRM.
  • ·Responding to support requests.

4. Third-Party Services

We share data with the following third parties only as necessary to provide the service:

  • ·Meta (WhatsApp Cloud API + Facebook Lead Ads) — message delivery and lead capture. Governed by Meta's Privacy Policy.
  • ·Render.com — API and database hosting.
  • ·Upstash — message queue (Redis). No personally identifiable information is stored beyond processing.

We do not sell your data to any third party.

5. Data Retention

We retain your data for the duration of your active account. Upon account deletion, data is permanently deleted within 90 days, except where retention is required by law.

6. Your Rights

Under India's Digital Personal Data Protection Act 2023 (DPDP Act), you have the right to:

  • ·Access the personal data we hold about you.
  • ·Request correction of inaccurate data.
  • ·Request deletion of your data.

To exercise any of these rights, email rajeshyou@gmail.com. We will respond within 30 days.

7. Cookies

We use a single session cookie to keep you logged in. We do not use advertising or tracking cookies.

8. Contact

For privacy-related questions or requests, contact us at rajeshyou@gmail.com.