Privacy Policy

When customers book, sign up or receive service, salons may store on HairNovi:

• Name, phone number, email address
• Appointment history and preferences
• Notes added by stylists (hair type, allergies, formulas used)
• Loyalty points and payment history

Salon owners provide business details required to operate the platform:

• Business name, address, GST/tax identifiers
• Team members, roles and permissions
• Service catalogue, pricing and inventory
• Bank / payout details processed by our payment partners

When you upload a selfie for AI consultation or hair try-on, the image is sent to our AI providers to generate hairstyle and colour previews. Uploaded selfies are:

• Processed for the sole purpose of generating your previews
• Not used to train third-party foundation models
• Retained only for the length of your session unless you explicitly save a look
• Never sold or shared for advertising

We use email + password and OAuth (Google) authentication. Passwords are hashed and never stored in plain text. Sessions use secure, HTTP-only tokens.

HairNovi uses cookies and local storage to keep you signed in, remember preferences and measure usage. See our Cookie Policy.

We collect aggregate, privacy-preserving analytics (page views, feature usage, performance metrics) to improve HairNovi. We do not sell analytics data.

Payments are processed by our PCI-DSS-compliant partners. HairNovi does not store full card numbers or CVV codes on its own servers.

We send transactional emails (booking confirmations, receipts, password resets, security alerts) and, with consent, product updates. You can unsubscribe from marketing emails at any time.

HairNovi relies on the following processors:

• Cloud hosting and database (encrypted at rest and in transit)
• AI providers (Google Gemini) for image generation
• Email delivery providers
• Payment gateways

Customer records are kept for as long as the salon account is active. Financial records are retained for the period required by applicable tax law (typically 7 years). Uploaded selfies not explicitly saved are deleted within 30 days.

You may request deletion of your salon or customer account at any time by emailing privacy@hairnovi.in. We will confirm deletion within 30 days, subject to legal retention requirements.

Depending on your jurisdiction you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion or export of your data
• Object to specific processing activities
• Withdraw consent for marketing communications

Data controller: HairNovi. Email privacy@hairnovi.in.