Salonix

Privacy Policy

Last updated 22 October 2026

Effective date: 22 October 2026. This Policy explains what personal data Salonix collects, why, who sees it and the choices you have.

In short

  • We collect what we need to run bookings, queues, billing and security, and nothing for advertising. We do not sell personal data.
  • Customers’ booking records belong to the salon they book with; we process them for the salon.
  • We use trusted providers for payments, messages, hosting and sign-in, listed in section 5.
  • You can correct your details in your Profile. You can ask for your account to be deleted at any time: you are signed out, and if you sign in again within 30 days the request is cancelled (section 10).
  • When an account is deleted we keep only what the law and the salons need, such as invoices and your name on them (section 10.4).

1. Introduction and scope

1.1 This Privacy Policy explains how Queue Solutions Private Limited ("Salonix", "we", "us"), of A12 I T Park SIIDCUL, S/Dhara Road, Sahastradhara Road, Dehradun, Uttarakhand - 248013, collects, uses, shares and protects personal data when you use the Salonix website salonix.ai and mobile applications (the "Platform"). It is issued under the Information Technology Act, 2000, the rules made under it, and the Digital Personal Data Protection Act, 2023 ("DPDP Act").

1.2 It applies to everyone who uses the Platform: salon owners, managers and staff ("Salon Users"), Salonix employees and field team members ("Team Members"), customers who book or join a queue through a salon ("Customers"), and visitors.

1.3 By using the Platform, or by giving your consent where we ask for it, you agree to this Policy. Where we need your consent (for example for location, camera or notifications) we ask separately, for a stated purpose, and you can say no or withdraw it later without losing the parts of the Platform that do not need it.

1.4 This Policy is in English. You may ask us for it in any language listed in the Eighth Schedule to the Constitution of India, and we will help.

2. Our role

2.1 For the account, billing, verification and security data of Salon Users and Team Members, Salonix decides why and how the data is used, and is the "Data Fiduciary" under the DPDP Act.

2.2 For Customer records that a salon enters or collects through the Platform, the salon decides why and how the data is used and is the Data Fiduciary. Salonix processes that data on the salon’s behalf and on its instructions as a "Data Processor".

3. Personal data we collect

CategoryDataPurpose
Account dataName, mobile number, email address, city and state, language and time-format choice, password (stored only as a one-way hash), Google account ID if you use Google sign-inCreate and secure your account; log you in
Business prospectsFor salons our field team approaches who are not yet users: the owner’s name, phone and email, the salon’s address and location, photos and notes from the visit. We get it from our team’s visit or from public listingsContact and sign up salons; plan field work
Verification dataOne-time passwords and the number or email they were sent toConfirm identity
Customer dataName and mobile number, preferred city, optional gender and date of birth, saved salons, bookings, queue and visit history, ratings and reviews, notification choicesBookings, queues, reminders
Salon dataBusiness and branch details, salon photos, staff list and attendance, owner verification documents, the owner’s Aadhaar and PAN details, UPI payment IDs, packages, coupons, support ticketsRun, verify and support the salon
Billing dataBilling name and address, GSTIN, plan, invoices, payment status and references. Card, UPI and bank details are collected and held by our Payment Partner, not by usCharge fees, issue tax invoices
Location dataYour device location, only if you allow it: to show salons near you; when a staff member marks attendance, if the salon has turned that on; and for Salonix field team members, at intervals while they have tracking switched on for an assignment and the app is openFind nearby salons, check attendance, field work
Camera and photosPictures you take or choose, such as salon photos and documents, and what the camera scans, such as a salon QR codeVerify salons, show galleries, join a queue by QR code
Technical dataDevice and browser type, IP address, push-notification token, logs of activity and errors. For field team members, the device type is recorded with each location readingSecurity, notifications, fixing faults

3.1 We get this data from you, from the salon you deal with (for example when it adds you to a queue or a team), from your device when you allow it, and from the providers in section 5 (for example a payment confirmation).

3.2 You are responsible for the accuracy of data you give us. You can correct your name, email and phone in your Profile.

4. How and why we use personal data

We use personal data only for lawful purposes, namely to:

  • provide, maintain and secure the Platform and your account;
  • take payments, issue invoices and keep tax records;
  • send one-time passwords, receipts, queue and appointment alerts and service messages;
  • provide customer support and handle complaints;
  • verify salons and prevent fraud, abuse and security incidents;
  • understand usage in aggregated form and improve the Platform; and
  • comply with law and respond to lawful requests.

We rely on your consent, on the need to perform our contract with you, and on the other lawful uses the DPDP Act permits. Promotional messages from Salonix are sent only with your consent, and you may withdraw it at any time.

5. Sharing of personal data

5.1 We share personal data only as follows:

  • With the salon you deal with: a Customer’s name, mobile number and booking or queue details.
  • With service providers: companies that help us run the Platform, such as payment gateways, cloud hosting, SMS, WhatsApp and email delivery, push notifications, maps and sign-in. They may use the data only to provide their service to us and must protect it.
  • With authorities where required by law, court order, or to protect rights, safety and security.
  • In a business transfer such as a merger or sale, to the successor, who must honour this Policy.

5.2 We do not sell personal data. We do not show third-party advertising on the Platform.

5.3 The service providers we use are listed in the table below. A provider is used only if it is switched on for the Platform at that time.

PurposeProviderWhat it gets
PaymentsRazorpaySalon subscription payments and autopay. Card, UPI and bank details go to the payment provider, not to us.
Messages and emailMeta (WhatsApp Cloud API), MSG91 (SMS), Resend (email)One-time codes, receipts and queue or appointment alerts: the number or address and the message. Resend also carries the encrypted copy of a deleted account described in section 10.4.
Sign-in and notificationsGoogle (Google sign-in, Firebase phone verification and push notifications)Sign-in identity, phone verification and a device token for push notifications.
Hosting and databaseRender (application servers) and Neon (database)All Platform data, stored on their servers.
Maps and placesOpenStreetMap (map tiles and Nominatim address lookup); Mappls and Google Places, where switched onThe map area you view and coordinates for address lookups, together with your device’s IP address, which any web map must receive to send tiles.
Images and documentsOur own database (Neon, above)Salon photos and verification documents.
Reading menu pictures and translating namesGoogle (Cloud Vision and Input Tools), where switched onThe menu picture or the service or plan names you type, when you use those features.
Payment pageRazorpayWhen you pay, Razorpay’s own script runs in your browser and collects your payment details directly.

6. Device permissions

6.1 Location. We ask your permission before using your device location. We use it only to give you the service you asked for: showing salons near you, letting a salon confirm that its staff are at the salon when they mark attendance (if the salon has turned that on), and for Salonix field team members on their assignments (see 6.4). You can turn location off at any time in your device settings. Some features will then not work, but you can still choose a city by hand.

6.2 Camera and photos. The camera or your photo gallery is used only when you choose a feature that needs it, such as scanning a salon QR code, uploading salon photos or documents, or importing a service list from a picture. We do not use them in any other way.

6.3 Notifications. We send push notifications for queue, appointment, payment and account updates. You can turn them off in your device settings.

6.4 Team Members. For Salonix employees and field team members, the Platform also records attendance and shifts, field visits and, in the field team’s app, location. Field location is recorded only after the Team Member switches tracking on for an assignment, at intervals while the app is open, and only to confirm and review the visit; it is not read in the background. Team Members can ask their manager or us about this data.

7. Storage and cross-border transfer

7.1 Data is stored on servers of our cloud providers, which may be located outside India. We transfer data only as the DPDP Act and the Government of India allow, and under safeguards that protect it.

8. Retention

8.1 We keep personal data for as long as your account is active and as long as needed for the purposes in this Policy, to meet legal, tax and accounting duties, to resolve disputes and to prevent fraud. After that we delete or anonymise it. The table below shows the main kinds.

8.2 Records that the law requires us to keep, such as tax invoices and payment records, are kept for the period the law requires.

DataHow long we keep it
Account and profile detailsWhile your account is active. Erased 30 days after you ask us to delete the account (section 10).
One-time codesValid for five minutes and stored only as a one-way hash. Deleted within a day after they expire.
Bills, invoices, payment and tax recordsFor the period the law requires, with the name on the bill.
Reviews and ratingsWith the salon they were written for, with the name of the reviewer.
Customer visit and booking recordsWith the salon that holds them, for as long as the salon needs them.
WhatsApp messages from salonsA record of each message, and any reply you write to the salon’s WhatsApp number, for 90 days, removed earlier with your account if it is deleted. Your WhatsApp choices for each salon are kept as the record of what you agreed to (section 13.3).
Support tickets and messagesAs long as needed to resolve the matter and handle any dispute. After an account is deleted they stay, linked to the name only.
Activity and audit recordsKept as the audit record of what happened on the Platform (for example billing and approval decisions), and used only for security, billing audit and fixing faults.
Attendance, shifts and field-visit recordsWhile the person works for the salon or Salonix, and afterwards as long as needed for pay, legal duties or a dispute. Location readings are deleted when the person’s account is deleted.
Salon owner’s Aadhaar, PAN and verification documentsWhile the salon is on the Platform. Deleted when the owner’s account is deleted.
Copy of a deleted accountIn a restricted archive that only authorised Salonix administrators can open, used only for legal duties or disputes, and destroyed automatically after eight years.

9. Your rights

9.1 Subject to the DPDP Act, you may:

  • ask for a summary of your personal data and how it is processed;
  • ask us to correct, complete or update it;
  • ask us to erase it, where it is no longer needed;
  • withdraw your consent at any time (this does not affect earlier lawful processing);
  • have access to grievance redressal; and
  • nominate another person to exercise your rights if you die or become incapacitated.

9.2 To exercise a right, email info@salonix.ai from your registered email or phone number, or use the options in the Platform where they are shown: you can correct your name, email and phone in your Profile, and ask to delete your account as described in section 10. Salon owners can also download their billing details and business records from their Profile. We aim to acknowledge a request within two working days and to reply within 30 days. We may decline a request where the law allows or requires, for example where we must keep tax records.

9.3 If you are not satisfied with our response, you may complain to the Data Protection Board of India as the law allows, after first using our grievance process.

9.4 A Customer should send requests about the Customer’s salon records to that salon, which controls them. We will help the salon respond.

9.5 We do not use a Consent Manager at present. You can withdraw a consent by turning the permission off in your device settings or by emailing us, and we stop the processing that depended on it.

10. Deleting your account

10.1 How to ask. Sign in, open your Profile (customers: Profile, then Account) and find Delete my account, then confirm with a one-time code sent to your own email or phone, or your password if the code does not arrive. If you cannot sign in, email info@salonix.ai from your registered email or phone number; we will help, but this is handled by hand and takes longer than doing it yourself.

10.2 What happens, step by step. This works the way most apps do (Instagram and Snapchat, for example):

  • When you ask, you are signed out of the Platform on every device straight away, and your account is deactivated. While it is deactivated you cannot use it and you receive no notifications. Records that already exist, such as a booking a salon holds, are not changed until the account is deleted.
  • Your account stays this way for 30 days. Nothing is deleted yet.
  • If you sign in again at any time during those 30 days, your deletion request is cancelled automatically and your account is back exactly as you left it. You do not need to do anything else.
  • If you do not sign in, your account is deleted when the 30 days end. If you ask again later, a new 30 days start.
  • Requests from customers and salons are accepted straight away; a request from a Salonix employee is reviewed by our team first, and may be accepted or declined.

Bookings you still hold are cancelled when the account is deleted, and any unused balance on a salon’s prepaid plan ends with the account and is not refunded.

10.3 What we delete. After the 30 days we delete your email, phone number, password and sign-in details, your profile details (such as gender, date of birth and city), saved salons, notifications and device tokens, your location readings, the reason you gave for leaving, and any access you had as staff or as a Salonix employee. For a salon owner we also delete the Aadhaar and PAN details, verification documents, UPI payment IDs and public phone number held for the salon.

10.4 What we keep, and why. Your name stays on your account record, on the invoices, bills, payment and tax records and reviews that carry it, and on the salon’s roster if you worked there, because the law and the salons concerned need it. Records a salon made about you, such as visits, bookings and its customer list, belong to the salon and stay with it. We also keep support tickets and messages, billing details, shift and visit records for employees (without location readings), and audit records of decisions, each as described in section 8. A copy of the account is kept in a restricted archive that only authorised Salonix administrators can open, used only to meet legal duties or handle a dispute, and destroyed automatically after eight years; where we have set up an archive mailbox, an encrypted copy is also sent to it by email. Copies in our backups are removed as the backups are replaced.

10.5 Salon owners. Deleting an owner’s account also closes the salon. When the request is made the subscription is set to end with the period already paid, or when the deletion runs after the 30 days if that comes first, and autopay is turned off. After the 30 days the salon is closed and open bookings are cancelled; customers’ unused balances on the salon’s plans end with it. Fees already paid are not refunded except as that Policy allows (for example a billing error), and unpaid invoices stay on record. A salon with another owner has to be sorted out with support first. A salon’s own records about its customers belong to the salon and may stay with it. Because asking to delete signs you out, download your records from your Profile first.

11. Security

11.1 We use reasonable safeguards: encrypted connections, hashed passwords, role-based access, access logging and limits on who within Salonix can see data. No system is completely secure, so we cannot guarantee absolute security.

11.2 If a personal data breach affects you, we will tell you and the Data Protection Board of India, as the law requires, and say what happened and what you can do.

12. Cookies and local storage

12.1 The Platform uses browser storage and similar technology to keep you signed in and to remember your language and settings. We do not use third-party advertising or cross-site tracking cookies. If this changes, we will update this Policy and ask for consent where needed. You can clear or block cookies in your browser, but some parts of the Platform may then not work.

13. Messages

13.1 Service messages such as one-time passwords, receipts, and queue and appointment alerts are sent as part of the service.

13.2 A salon may use the Platform to message its own customers. The salon is responsible for having the consent the law requires, and for stopping messages when a customer asks. Salonix only delivers those messages for the salon.

13.3 WhatsApp messages from salons. A salon that uses the Salonix WhatsApp feature can send you updates about your booking, your turn in the queue and your bill from the salon’s own WhatsApp number, but only if you agreed: by ticking “Send me updates on WhatsApp” when you join a queue or book, or by telling the salon’s front desk. Offers are sent only if you agreed to them separately. Your choice applies to that salon only. Reply STOP to the salon’s WhatsApp message to stop, reply START to receive updates again, or change your choice for each salon in your Profile (customers: Profile, then Account). The messages are delivered through Meta’s WhatsApp service, so Meta processes your number and the message. A record of each message is kept for 90 days, and is removed with your account if it is deleted. If you write back to the salon’s WhatsApp number, the salon can read your message and answer it from the Platform (only within 24 hours of your message, as WhatsApp allows). Your messages and the salon’s answers are shown only to that salon, kept for 90 days, and removed with your account if it is deleted.

14. Links to other sites

14.1 The Platform may link to other sites that have their own privacy practices. We are not responsible for them.

15. Children

15.1 The Platform is meant for people who are 18 years or older. To open a salon account as its owner you must be 18 or older; we do not collect a date of birth for this, and by registering you confirm it. A person under 18 should use the customer features only with a parent or guardian, who gives the consent the law requires for a child’s personal data.

15.2 We do not show advertising to children. If you believe we hold a child’s personal data without a parent or guardian’s consent, contact us and we will delete it.

16. Changes

16.1 We may update this Policy. The updated version will show a new effective date. For material changes we will notify you in the Platform or by email.

16.2 Version history. 22 October 2026: summary, service-provider and retention tables added; account deletion section rewritten (signed out at once; signing in again within 30 days cancels the request; what is deleted and kept; salon owners).

17. Grievance Officer and contact

For questions, complaints or to exercise your rights, contact the Grievance Officer: Sonu Kumar, sonu@salonix.ai, Queue Solutions Private Limited, A12 I T Park SIIDCUL, S/Dhara Road, Sahastradhara Road, Dehradun, Uttarakhand - 248013 (D-U-N-S: 312224691). General contact: info@salonix.ai. We acknowledge a complaint within two working days and aim to resolve it within 30 days.