Privacy Policy

1Who is responsible

Each salon that uses e-Salon decides which customers, staff and sales it records, and is responsible for that information. OAW INFOTECH LLP processes it on the salon's behalf to provide the service. If you are a salon customer, please contact the salon first about your information.

2Information we collect

• Staff accounts: name, email address or username, role and permissions. Passwords are stored only as secure one-way hashes, never in readable form.
• Salon records entered by staff: customer names and mobile numbers, appointments, sales and invoices, memberships, services and prices, staff attendance and salaries, and expenses with their receipts.
• Security logs: each sign-in attempt with its time, IP address and browser or device details, used to protect accounts from password guessing.
• App diagnostics (Android app): crash reports and usage events through Google Firebase Crashlytics and Analytics, such as the device model, Android and app version, which sections are opened, and the amount and number of items of a completed sale. These never include customer or staff names, phone numbers or email addresses.
• Notifications: a Firebase Cloud Messaging token and the salon code, used to deliver notifications to your salon's devices.

3Android app permissions

• Internet: to connect to your salon's account.
• Nearby devices (Bluetooth): only to print receipts on a Bluetooth printer already paired with the phone. The app does not scan for devices or use your location.
• Notifications: to show announcements and alerts for your salon. You can turn them off in Android settings at any time.
• Fingerprint or face unlock (optional app lock): the check is done by Android. Your biometric data never leaves the device and is never available to the app or to us.

4How we use information

• To provide the service: billing and invoices, appointments, customer records, memberships, staff management and reports.
• To keep accounts secure: sign-in, lockouts after repeated wrong passwords, and investigating misuse.
• To find and fix crashes and to understand which features are used, so the app can be improved.
• To send notifications to your salon's devices, and invoice links to customers over WhatsApp when a staff member chooses to share one.

5Sharing

• The salon: records are visible to that salon's authorised staff according to their role. Each salon's data is kept separate, and other salons cannot see it.
• Service providers that help run the service: our hosting provider; Google Firebase for crash reports, analytics and notifications; and Google Play for app updates.
• WhatsApp: when staff share an invoice, WhatsApp opens with the customer's number and a private invoice link. Use of WhatsApp is subject to WhatsApp's own privacy policy.
• Legal reasons: when required by law, or to protect the rights and safety of users and the service.

6How information is protected

All connections use HTTPS. Passwords are hashed, accounts lock after repeated wrong passwords, and every salon's data is kept separate. The Android app keeps its sign-in in the device's secure storage (Android Keystore) and can be locked with fingerprint or face unlock. Invoice links sent to customers use long random codes that cannot be guessed. No system is perfectly secure, but we work to protect your information.

7How long information is kept

• Salon records are kept while the salon uses the service, so the salon can keep its sales history and meet its tax and accounting obligations.
• Sign-in security logs are deleted after 180 days.
• Crash reports are kept by Firebase Crashlytics for 90 days; analytics data follows the Google Analytics retention setting (2 to 14 months).
• When a salon stops using the service, its data is deleted on request, except where the law requires us to keep it.

8Your choices and rights

• Salon customers: ask the salon to see, correct or delete your details.
• Staff: ask your salon administrator, or contact us, to access, correct or delete your account and information.
• Deleting an account: a salon administrator can delete a staff account in the admin panel under Users. To delete a whole salon account and its data, email us from the salon's registered address.
• Notifications: turn them off for the app in Android settings.

9Children

The service is meant for businesses and their staff. It is not intended for anyone under 18, and we do not knowingly collect information from children.

10Changes to this policy

We may update this policy as the service changes. The date at the top shows the latest version; significant changes will also be announced in the app or admin panel.