This policy explains how Salon Clock (“Salon Clock”, “we”, “us”), operated by Salon Clock (TODO: registered business name), handles personal data when you visit this website, book a demo, or use the Salon Clock app at https://salon-clock.pages.dev. It is written to meet India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Information Technology Act, 2000 and its rules.
Who is responsible for what
- Website and demo requests. For data you give us on this website, we are the Data Fiduciary.
- Inside the app. A salon (our customer) decides which staff to add and what to record about them. For staff data in the app, the salon is the Data Fiduciary and we are its Data Processor: we process that data only on the salon’s instructions and to run the service.
What we collect
On this website
- Details you submit in the demo form: name, salon name, phone, email (optional), city, team size and your message.
- Anonymous, cookie-free usage statistics through Cloudflare Web Analytics (pages viewed, referrer, country, device type). It does not use cookies or track you across sites.
- A bot check by Cloudflare Turnstile when you submit a form.
In the app (on behalf of the salon)
- Staff profile: name, staff code, phone, role, brand, shift, joining date, salary set-up, and bank name, IFSC and only the last 4 digits of the account number.
- Attendance: check-in and check-out times (from our server), GPS location and its distance from the salon at the moment of the punch, a device identifier, and an optional selfie.
- Leave, corrections, rosters, sales entries, incentives, advances, payroll and payslips.
- Push-notification subscriptions, if a user turns them on.
- An audit log of changes made by owners and managers.
We do not track location in the background. GPS is read only when a user taps check-in or check-out.
Why we use it
- To provide the service: attendance, payroll, incentives and the other features the salon uses.
- To respond to demo requests and support questions.
- To keep the service secure and prevent misuse (for example, rate limits and bot checks).
- To meet legal obligations.
We do not sell personal data and we do not use it for advertising.
Where it is stored and who processes it
The app’s database and files are hosted with Supabase in the Mumbai (ap-south-1) region. The website and app are served through Cloudflare. These providers process data for us under their own security and confidentiality commitments. We may disclose data if required by law.
How long we keep it
- Selfies and raw punch records are deleted automatically after the salon’s retention period (6 months by default).
- Payroll records and their audit trail are kept long-term because employers are legally required to keep wage records.
- Demo requests are kept for up to 24 months, or deleted sooner on request.
- When a salon stops using Salon Clock, we delete or return its data on request, except where the law requires us to keep it.
Security
Every salon’s data is isolated at the database level with row-level security. Selfies are kept in private storage and viewed through links that expire within minutes. Locked payroll cannot be edited, and changes to sensitive records are logged. No system is perfectly secure, but we work to protect your data and will notify affected customers and authorities of a breach as the law requires.
Your rights
Under the DPDP Act you can ask to access, correct, update or erase your personal data, withdraw consent, and nominate someone to exercise your rights. Staff using the app should contact their salon first, since the salon controls their records; we will help the salon respond. For anything else, write to us at hello@example.com.
Grievance officer
If you have a concern about how your data is handled, contact our grievance officer at hello@example.com, TODO: registered address, Chennai, Tamil Nadu, India. We aim to respond within 30 days.
Children
The service is meant for businesses and their adult employees. We do not knowingly collect data from children.
Changes
We may update this policy. The date at the top shows the latest version, and we will tell customers about significant changes.