Legal

Privacy Policy

Last updated: January 1, 2026

Salontag ("we", "our", or "us") operates the Salontag platform accessible at https://www.salontag.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. Please read this policy carefully.

1. Information We Collect

1.1 Information You Provide

Account Information: Name, email address, phone number, and password when you register.
ServiceProvider Information: Business name, address, logo, and settings you configure.
Business Data: Customer records, appointments, invoices, staff details, products, services, and financial records you enter into the platform.
Payment Information: Billing details processed securely through Razorpay. We do not store your card numbers or UPI credentials — these are handled entirely by Razorpay.

1.2 Information Collected Automatically

Usage Data: Pages visited, features used, actions taken, and timestamps.
Device Information: Browser type, operating system, IP address, and device identifiers.
Cookies: Session cookies for authentication and preference cookies for your settings. We do not use third-party advertising cookies.

1.3 Information from Third Parties

Razorpay: Payment status, transaction IDs, and billing confirmation data.
OpenAI: If you use AI Reports, aggregated and anonymized business metrics are sent to OpenAI's API. No personally identifiable customer data is included.

2. How We Use Your Information

We use the information we collect to:

Provide, operate, and maintain the Salontag platform.
Process payments and manage your subscription.
Send transactional emails (email verification, password reset, payment receipts).
Send appointment reminders to your customers on your behalf (only when you configure and trigger this feature).
Generate AI-powered business insights using anonymized, aggregated data.
Monitor platform performance, detect errors, and improve our service.
Comply with legal obligations and enforce our Terms of Service.
Respond to your support requests and communications.

We do not sell your personal data or your customers' data to any third party.

3. Data Isolation & Multi-Tenancy

Salontag is a multi-tenant platform. Each ServiceProvider's data is strictly isolated. Every database query is scoped to your ServiceProvider ID — it is architecturally impossible for one ServiceProvider to access another ServiceProvider's data. This isolation is enforced at the API layer on every request.

4. Data Sharing & Disclosure

We share your information only in the following circumstances:

Service Providers: We use Razorpay (payments), Twilio (SMS reminders), and OpenAI (AI insights) as sub-processors. Each is bound by their own privacy policies and data processing agreements.
Legal Requirements: We may disclose information if required by law, court order, or government authority.
Business Transfer: In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.
With Your Consent: We may share information for any other purpose with your explicit consent.

5. Data Retention

We retain account and business data for as long as your account remains active, or as needed to deliver the Service and support legitimate business operations.

If you request account deletion, we will delete or anonymize your ServiceProvider data within a reasonable period (typically within 30 days), except where retention is required for legal, compliance, fraud-prevention, or accounting obligations (for example, certain payment and tax records).

6. Security

We implement industry-standard security measures including:

HTTPS/TLS encryption for all data in transit.
bcrypt password hashing — passwords are never stored in plain text.
JWT session tokens with short expiry and secure flags.
MongoDB with serviceProvider-scoped queries to prevent cross-tenant access.
Regular security reviews and dependency updates.

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your Rights

Subject to applicable law, you may request to:

Access: Obtain a copy of personal data we hold about you.
Correction: Correct inaccurate or incomplete personal data.
Deletion: Delete your account and associated personal data (subject to legal retention exceptions).
Portability: Receive an export of your data in a machine-readable format, where feasible.
Objection/Restriction: Object to or request restriction of processing in certain circumstances.

To exercise these rights, contact hello@salontag.com. We may request verification details before fulfilling privacy requests.

8. Cookies

We use the following types of cookies:

Essential Cookies: Required for authentication and session management. Cannot be disabled.
Preference Cookies: Remember your settings (language, currency, timezone). Can be cleared via your browser.

We do not use advertising, tracking, or analytics cookies from third parties.

9. Children's Privacy

Salontag is a business management platform intended for use by adults (18+) operating businesses. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by displaying a prominent notice on the platform. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the platform after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: hello@salontag.com
Website: https://www.salontag.com

Back to Home