1. Information we collect
- Account and business information such as name, email, phone number, salon details, branch details, tax information, domain information, and login or support records.
- Operational information entered by a salon, including appointments, customer profiles, invoices, staff records, services, products, loyalty activity, feedback, and uploaded branding or media.
- Checkout information such as the Razorpay order ID, payment ID, amount, status, and contact details. Razorpay handles sensitive payment credentials.
- Technical information such as device/browser details, IP address, security events, logs, and cookies needed for sessions, CSRF protection, fraud prevention, and reliability.
2. Why we use it
We use information to create and secure accounts, provide salon workflows, verify payments, activate packages, send transactional notices, provide support, prevent fraud and abuse, maintain backups, improve reliability, meet legal and tax obligations, and respond to lawful requests. Marketing messages are sent only where permitted and should include an opt-out route.
3. Sharing and processors
We share only what is needed for the service with service providers operating under their own terms and safeguards. Depending on configuration, this may include Razorpay for payment processing, email delivery, SMS delivery, WhatsApp/Meta messaging, hosting and PostgreSQL infrastructure, domain providers, and security or monitoring services. We do not sell customer data. The operator should publish the final processor list and each provider’s privacy link before launch.
4. India data-protection practices
We aim to follow applicable Indian privacy and data-protection requirements, including the Digital Personal Data Protection Act, 2023 and rules notified under it, as applicable to the operator and processing activity. The operator must confirm the correct notice, consent, children’s-data, cross-border transfer, breach-response, retention, and grievance requirements for its actual business and customer base.
Salon owners are responsible for giving their customers and staff the notices required for the data they collect, using the platform only for lawful purposes, and honouring requests that they are responsible for handling.
5. Retention, security, and user choices
We retain information only for as long as needed for the service, support, security, tax, dispute, and legal purposes described above. We use access controls, secure transport, audit records, and operational safeguards, but no internet service can promise absolute security. Contact info.vmaplatform@gmail.com to request access, correction, deletion, export, or to raise a privacy concern. Some records may need to be retained where law or a legitimate dispute requires it.
6. Cookies and communications
Essential session and security cookies may be required for login, checkout, CSRF protection, and account continuity. Optional analytics or marketing cookies should be disclosed and controlled according to applicable law. Transactional messages about bookings, payments, account security, and service status may still be sent when permitted.
7. Children and sensitive information
The platform is intended for salon businesses and authorised adult operators. Do not knowingly collect children’s data or sensitive personal information unless you have a lawful purpose, appropriate notice and consent, and the safeguards required by applicable law. Salon owners must verify age and guardian requirements for their own services.
8. Grievance contact and updates
For privacy questions or grievances, email info.vmaplatform@gmail.com with the subject “Privacy request”. Include enough information to identify the account, but do not include passwords or payment credentials. We may update this notice when the service, processors, or law changes; the latest policy version is shown at the top of this page.