Privacy Policy

For salon owners and staff, Glaamora decides how account information is used and is responsible for it.

For a salon's customers, the salon decides what it records about you and why. Glaamora stores and processes that information for the salon, on its instructions. Questions about your bookings or purchases are best sent to the salon first; we will help it answer.

• Accounts: name, email address, phone number, password (stored only as a one-way hash), role and the branches someone works in.
• Customers of a salon: name, phone, email, bookings, services and products bought, invoices, payments and any notes the salon adds.
• Staff records kept by a salon: attendance, leave, payroll and, where the salon uses attendance terminals, a fingerprint or face template held by the terminal to check who is clocking in.
• Billing:the salon's plan, invoices and payment status. Card and mobile-wallet details are handled by the payment provider; Glaamora does not store them.
• Technical: sign-in times, IP address and error reports, used to keep accounts secure and fix problems.

• To run the service: bookings, invoices, reports, reminders and the salon's website.
• To send the emails and messages the service needs, such as sign-in links, receipts and booking reminders.
• To bill salons for their plan.
• To protect accounts, prevent abuse and fix faults.

We do not sell personal information, show advertising based on it, or use one salon's customer list for anyone else. Each salon's data is stored separately and cannot be seen by other salons.

Only the services Glaamora needs to operate, each bound to use the data only for that purpose:

• Hosting, database and file storage providers, and our encrypted off-site backups.
• Email and SMS delivery providers.
• Payment providers, for salon subscriptions and customer payments.
• An AI provider, only when a salon uses the assistant, and only for that request.
• Error monitoring, which may include technical details of a failed request.

We disclose information to authorities only when the law requires it.

• While a salon's account is open, for as long as the salon keeps it.
• After a salon closes its account, for a short period in case it was a mistake, then permanently deleted. Backups containing it expire within the backup retention period (currently 14 days).
• Invoices may be kept longer where tax law requires.

You can ask to see, correct or delete personal information about you. Salon owners can export all of their salon's data from the dashboard. Customers can ask the salon, or write to us and we will pass the request on.

You can stop marketing messages at any time; messages needed for a booking or an account still arrive.

Connections are encrypted, passwords are hashed, access inside a salon follows the roles and branches the owner sets, and backups are checked. No system is perfectly secure; if a breach affects your information we will tell the salon and, where required, you.

If this policy changes in a way that matters, salon owners are told before it takes effect. Questions or requests: privacy@glaamora.com