This Privacy Policy explains how Broveg Private Limited, operating as Wapixo ("Wapixo", "we", "us", "our"), collects, uses, shares, and protects information when you use our salon management platform — as a salon or spa business ("Customer") or as a customer of a salon that uses Wapixo ("End User"). This policy applies alongside our Terms of Service.

1. Introduction

We built Wapixo to help salons run their business, which means we handle two kinds of personal data: information about the salon owners, managers, and staff who use our dashboard, and information about the salon's own customers (bookings, contact details, purchase history) that the salon enters into or connects to the platform. Salons act as the data controller for their customers' information; Wapixo processes it on their behalf, as their data processor.

2. Information We Collect

Account information: Name, email, phone number, business name, password (stored hashed)
Business data: Services, staff records, inventory, invoices, bookings, outlets
End-user data: Customer name, phone, visit history, loyalty/membership status, entered by the salon
Payment data: Subscription billing details, processed directly by Razorpay — we do not store full card numbers
Usage data: Log data, device/browser information, pages visited, feature usage
Location data: Outlet address and, where you allow it, approximate location for nearby-salon discovery

3. How We Use Information

To provide, operate, and maintain the Service — bookings, billing, staff, and inventory management;
To send transactional messages: appointment confirmations, reminders, OTPs, and payment receipts;
To send marketing communications on a salon's behalf, where the salon has configured this and the end user has not opted out;
To process subscription payments and prevent fraud;
To generate analytics and, where enabled, AI-driven business insights for the salon;
To improve and secure the Service, and to comply with legal obligations.

4. Sharing With Third Parties

We share information with the following categories of service providers, only as needed to operate the Service:

Razorpay — to process subscription and in-app payments;
WhatsApp Business Platform — to deliver booking and reminder messages you or a salon send;
Cloudinary — to store images uploaded to the platform (e.g. staff, product, or catalogue photos);
Firebase (Google) — to deliver push notifications and support secure sign-in;
Google Maps — to geocode outlet addresses and power location-based search;
SMS gateway providers — as a fallback channel for certain time-sensitive notifications.

We do not sell personal data. We may disclose information if required by law, to protect our rights, or in connection with a merger, acquisition, or sale of assets, subject to this policy continuing to apply to any transferred data.

5. WhatsApp & Messaging

Salons using Wapixo may send you appointment-related messages and, if you've agreed to receive them, promotional messages over WhatsApp or SMS. These messages are sent by the salon using our platform; we act as the technical provider. You can ask the salon directly, or use any opt-out link provided in a message, to stop receiving non-essential communications.

6. Data Retention

We retain account and business data for as long as your account is active, and for a reasonable period afterward to allow for data export, comply with tax/accounting obligations (e.g. invoice records), and resolve disputes. You can request earlier deletion of your data, subject to any legal retention requirements, by contacting us (Section 13).

7. Data Security

We use industry-standard safeguards — encrypted connections (HTTPS), hashed passwords, role-based access controls, and per-salon data isolation — to protect information against unauthorized access, alteration, or disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Subject to applicable law, including India's Digital Personal Data Protection Act, 2023, you may have the right to access, correct, or request deletion of your personal data, withdraw consent for optional processing (such as marketing messages), and lodge a complaint with the relevant data protection authority. Salon end users should also raise data requests with the salon they visit, as the salon controls that relationship; we support salons in fulfilling such requests.

9. Cookies

Our website and dashboard use cookies and similar technologies as described in our Cookie Policy.

10. International Transfers

Some of our service providers (e.g. Cloudinary, Firebase/Google) process data on servers located outside India. Where this occurs, we rely on those providers' own security and compliance safeguards to protect your information.

11. Children's Privacy

The Service is intended for business use by adults. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will take steps to remove it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will revise the "Last updated" date above and, for material changes, make reasonable efforts to notify affected users.

13. Grievance Officer

In accordance with applicable Indian law, for any privacy-related grievances, please contact our Grievance Officer at support@wapixo.com. We aim to acknowledge grievances within 48 hours and resolve them within 30 days.