Privacy Policy

1) Data we collect

We may collect account and salon information such as salon name, owner name, email, and phone number, as well as operating data such as services, bookings, staff details, customer contact information, basic usage logs, and technical activity needed to run the service.

• Salon data: salon name, owner, contact details, settings, currency, and operating identity.
• Booking data: date, time, service, staff member, booking status, and related notes.
• Staff data: names, roles, schedules, and management data related to permissions.
• Customer data: name, phone number, visit history, and notes entered by the salon.
• Usage logs: sign-in attempts, core activity logs, performance data, and device or browser details when operationally or security necessary.

2) Why we collect data

We collect data to operate the platform correctly, power the public booking experience, manage staff and customers, process subscriptions and payments, improve reliability, and reduce abuse or unauthorized access attempts.

3) How we use data

• To run the salon dashboard, public booking page, and booking confirmation and management flows.
• To display services, staff, customers, reports, and operating history within the account.
• To support verification, sign-in, notifications, and booking-related links or actions.
• To improve service reliability, support users, and investigate outages or unusual behavior.

4) Data retention and backups

We retain data for as long as it is needed to provide the service or meet reasonable operational and security obligations. Periodic backups may be retained longer for recovery from outages, accidental deletion, user error, or infrastructure incidents.

• Backups may remain available for a limited operational window before rotation or deletion.
• Some technical or security logs may be retained longer when necessary to prevent fraud or investigate abuse.

5) Third parties and service providers

Qasati relies on limited third-party services to operate certain parts of the platform. We share the minimum practical data needed for those purposes.

• Supabase for data storage, authentication, and related database operations.
• Stripe for payments and subscription processing when online payments are enabled.
• Firebase or related OTP providers for phone verification and one-time code delivery or validation.
• WhatsApp deep links to help open a conversation or action on the user device, without making WhatsApp part of Qasati’s internal data store.

6) Security basics

We apply reasonable baseline protections such as rate limiting on certain sensitive flows, access control by account or role, identity verification, and limiting direct public access to sensitive operational files where appropriate.

• Access control for accounts and dashboards based on authentication and permissions.
• Rate limiting and verification throttling on selected sensitive flows.
• Protection of backups and sensitive operational files from direct public access whenever possible.

7) User rights

Account owners may request access to their data, ask for corrections or updates, and request deletion or restricted use where reasonably compatible with operational and legal requirements.

• Review or update account and salon information from inside the system when the feature is available.
• Request help with deletion or correction of specific data through the support email below.

8) Contact

For privacy questions, data requests, or correction and deletion requests, contact us at: