Information We Collect
When you use the Veltorix Salon app, we may collect the following categories of information to provide and improve our services:
How We Use Your Data
Your information is used solely to operate and improve the Veltorix platform. Specifically:
Account & Authentication — to create your account, verify your identity, and keep your session secure across devices.
Booking Management — to schedule, confirm, reschedule, or cancel salon appointments on your behalf and notify you of changes.
Service Personalisation — to remember your preferences, favourite services, and preferred staff members for a faster booking experience.
Notifications — to send appointment reminders, status updates, and important account alerts via push notification or email.
Platform Improvement — to analyse aggregated, anonymised usage data to fix bugs and develop new features.
Data Sharing & Disclosure
We share your data only in the following limited circumstances:
Salon Operators — When you book an appointment, your name and contact details are shared with the specific salon branch to fulfil your booking. Salon operators are contractually bound to not use your data for any other purpose.
Service Providers — We use trusted infrastructure providers (hosting, database, email delivery) who process data strictly on our behalf under data processing agreements. These include cloud hosting partners and payment gateway providers.
Legal Requirements — We may disclose information when required by law, court order, or to protect the rights, safety, or property of Veltorix, its users, or the public.
Business Transfers — In the event of a merger or acquisition, your data may be transferred to the new entity, which will be bound by the same privacy commitments.
Data Retention
We retain your personal data only for as long as necessary to provide services and meet legal obligations:
Active Accounts — Data is retained for the duration of your account's active status.
Deleted Accounts (Soft Delete) — Upon deleting your account, your profile is soft-deleted. To preserve booking records, past loyalty points, and history, your basic contact info (name, email, phone) is securely retained. However, your account will be deactivated and your physical address, gender, date of birth, and profile picture will be completely cleared. You can restore your account at any time simply by logging back in with your password or requesting a restoration link during registration.
Legal Holds — Certain transaction records may be retained for up to 7 years where required by applicable financial or legal regulations.
Security Measures
Protecting your data is our top priority. We implement industry-standard security practices:
Encryption in Transit — All data transmitted between the app and our servers is encrypted using TLS 1.3. API communications use HTTPS exclusively.
Encryption at Rest — Sensitive data, including passwords, is stored using bcrypt hashing. Authentication tokens are stored in device-level secure storage (Android Keystore / iOS Secure Enclave).
Access Controls — Strict role-based access controls (RBAC) ensure that salon staff can only access data relevant to their branch, and your data is never visible to staff of other salons.
Auditing — We maintain access logs and conduct periodic security reviews. Any breach is disclosed to affected users within 72 hours as required by applicable law.
Your Rights
You have the following rights with respect to your personal data. To exercise any right, contact us at the address in Section 10:
Request a copy of all personal data we hold about you.
Correct inaccurate or incomplete information in your account.
Request deletion (deactivation and soft-deletion) of your account and personal data.
Receive your data in a structured, machine-readable format.
Request restriction of processing in specific circumstances.
Object to processing for purposes beyond core service delivery.
Children's Privacy
The Veltorix Salon App is intended for users 13 years of age and older. We do not knowingly collect personal information from children under 13.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at the address below. We will promptly investigate and delete any such data.
Third-Party Links
The Veltorix app or website may contain links to third-party websites or services (e.g., payment gateways, map providers). These external services have their own privacy policies, which we do not control.
We are not responsible for the privacy practices of third-party sites. We encourage you to review the privacy policy of any external service before providing personal information to them.
Our app integrates with the following third-party services, each subject to their own privacy terms: Google Maps (location display only), Razorpay / Stripe (payment processing), and SendGrid (transactional email delivery).
Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or app features. We will notify you of any material changes by:
• Posting a notice in the app at least 14 days before the change takes effect.
• Sending an email notification to your registered address for significant changes.
• Updating the "Last Updated" date at the top of this page.
Your continued use of the Veltorix app after any update constitutes your acceptance of the revised policy. If you disagree with the changes, you may delete your account before the effective date.
Contact Us
If you have any questions about this Privacy Policy, want to exercise your data rights, or need to report a privacy concern, please reach out to us:
App ID: com.veltorix.app
Response time: within 48 hours on business days
Or email us at contact@veltorix.in