Privacy Policy

1. Who is responsible for your data

Salon OS is provided by thynkWISE. For information a salon records about its customers, staff and operations, that salon is normally the data fiduciary or controller and thynkWISE processes the information on its behalf. The salon decides why the information is used and who may access it. thynkWISE is responsible for data it uses for account security, service operation, support and its own legal obligations.

If you are a customer or staff member of a salon, contact that salon first about its records. You may also contact thynkWISE using the details below.

2. Information Salon OS handles

• Account and identity data: name, email address, mobile number, profile image, salon, role, branch assignment, sign-in and security-factor status, and session and audit information.
• Salon operations data: customer contact details and preferences, appointments, services and visit history, memberships, packages and loyalty activity, invoices, tax and payment records, inventory, and communications connected with those services.
• Workforce data: staff profile and employment details, roster, attendance, leave, payroll, incentives, targets, performance and manager decisions recorded in the service.
• Device and usage data: IP address, browser and device information, service logs, security events, performance information, cookies and similar storage needed to keep a person signed in and remember their settings.
• Location: precise device location when a staff member asks the app to confirm that they are within the approved branch check-in area. Salon OS uses it for that attendance check and does not continuously track a device.
• Camera and face-check information: where a salon has enabled optional face checks, the app may capture a short video selfie, an approved reference photo, liveness and match results, and the manager's review decision. Staff can use the documented Face ID-only alternative without adding a reference photo.

3. Face ID, fingerprints and face checks

Face ID, fingerprint or device-screen-lock authentication is performed by the user's phone through a passkey. The biometric itself is not sent to thynkWISE; Salon OS receives only the cryptographic result needed to verify the passkey.

A salon may separately enable a camera-based face check for attendance. The app gives staff a notice before enrolment. Approved reference photos are kept until the staff member or manager removes them, or the staff member leaves. Check-in images are configured for automatic deletion after 90 days. Match scores and manager decisions remain with the attendance record. Face-check images are stored with Amazon Web Services in Mumbai, India; other Salon OS records may be processed in the United States.

4. How information is used

Salon OS uses information to:

• provide bookings, checkout, salon operations, staffing and reporting;
• authenticate users, enforce roles and branch access, and prevent fraud or misuse;
• send service, account, booking and invoice communications requested by a salon;
• maintain, troubleshoot, measure and improve service reliability and usability;
• respond to support, privacy and security requests; and
• meet contractual, tax, accounting, employment and other legal obligations.

thynkWISE does not sell personal data and does not use Salon OS data for third-party targeted advertising.

5. When information is shared

Information may be available to:

• the salon and its authorised staff, limited by their role and branch;
• cloud hosting, database, storage, security, analytics, email, SMS and WhatsApp providers that process data to operate Salon OS under contract;
• professional advisers, regulators, courts or authorities where required to protect rights, investigate abuse or comply with law; and
• a successor in a merger, financing, reorganisation or sale, subject to appropriate confidentiality and legal safeguards.

A salon may configure its own service providers. Its privacy notice should explain any additional sharing it directs.

6. Retention and deletion

Information is kept only for as long as needed for the purposes above, the salon's instructions, dispute resolution and legal retention duties. Retention differs by record: short-lived authentication challenges and sessions expire; check-in images are deleted after 90 days; accounting, invoice, attendance, payroll, security and audit records may need to be kept for longer legal or operational periods.

You can ask for account or personal-data deletion through the public account deletion page. Some records may be retained, restricted or de-identified where the salon or thynkWISE must keep them by law, for security, or to establish or defend legal claims.

7. Security

Salon OS uses encrypted network connections, authenticated sessions, role- and branch-based access controls, tenant isolation, audit trails and other technical and organisational safeguards. No system can guarantee absolute security. Users should protect their sign-in methods and report suspected unauthorised access promptly.

8. Your choices and rights

Depending on applicable law, you may ask to access, correct, erase or receive information, withdraw consent where processing relies on consent, object or complain. You may deny camera or location permission in device settings, although the feature that needs it will not work. Staff may remove an enrolled face photo from the staff app or ask their salon.

For salon-controlled records, submit the request to the salon. For a Salon OS account, use the account deletion request. thynkWISE will verify the requester before acting and may coordinate with the salon that controls the relevant records.

9. Children

Salon OS is a business and workforce service and is not directed to children. Salons must not create workforce accounts for a child or enter a child's data unless they have a lawful basis and provide every notice and safeguard required by applicable law.

10. Changes to this policy

This policy may be updated when Salon OS features, providers or legal requirements change. The current version and its revision date will remain available at this URL. Material changes will be communicated where required.

11. Contact

For privacy questions or requests, email partner@thynkwise.co.in or write to thynkWISE through its published contact channels. Include the salon or workspace name and enough information to locate the account, but do not send passwords, PINs, one-time codes or identity documents by email.