Privacy policy.

We collect the following categories of information:

• Account data — name, email, phone, profile photo URL (optional), and authentication identifiers (e.g. Google sign-in).
• Booking data — services chosen, scheduled date and time, service address, special notes you provide and booking status updates.
• Payment data — payment method, amount, status, Razorpay order/payment identifiers. We do not store full card numbers, CVV, UPI PINs or online banking credentials — those are handled directly by Razorpay.
• Support data — messages and tickets you submit through the support channels.
• Technical data — IP address, browser/device information and basic usage analytics needed to keep the service reliable.

• To create and manage your account.
• To deliver, confirm and update your bookings.
• To process payments and refunds, and to issue receipts.
• To assign professionals and share necessary booking details (name, address, contact, service notes) with the assigned professional only.
• To send transactional emails — booking confirmations, payment receipts, refund updates and support replies.
• To improve product quality and prevent fraud or abuse.

We share data only with:

• Assigned professionals — to deliver the service you booked.
• Payment provider (Razorpay) — to process online payments and refunds.
• Email infrastructure (Resend or equivalent) — to send transactional emails.
• Authentication & database (Supabase) — to store account, booking and audit data.
• Law enforcement — only when legally required.

We do not sell your data to third parties.

We use essential cookies for authentication, session management and shopping-cart state. Where analytics are enabled, they collect aggregated, non-personally-identifying usage data to help us improve the product. You can control cookies via your browser settings.

We retain booking, payment and audit records for as long as your account is active and as required by Indian tax/accounting law. You can request deletion of personal data by contacting support — note that some records (financial, audit) must be retained by law.

Data is stored on infrastructure with industry-standard encryption in transit (TLS) and at rest. Payment details are tokenised via Razorpay and never stored on our servers. Access to production data is restricted to authorised team members.

You can:

• Access and update your profile data from your account.
• Download a copy of your bookings and payment history by contacting support.
• Request deletion of your account and personal data (subject to legal retention).
• Unsubscribe from non-transactional emails at any time.

Universal Home Salon is intended for adults. We do not knowingly collect data from children under 18. If a minor has created an account, contact us so we can remove it.

We may update this privacy policy as the product evolves or as regulations change. Material changes will be communicated via email or an in-app notice.

Privacy questions? Reach us via the contact page.