Privacy Policy

Last updated 9 October 2026

1. Who we are

HairWorks CRM is salon software (appointments, billing, staff, packages and WhatsApp messages) offered at hairworks.in. It is a product of Software Conduit ("HairWorks", "we", "us"), VHPW+VV, Venugopal Reddy Layout, Arekere, Bengaluru, Karnataka 560076.

This policy covers the hairworks.in website, signing up for HairWorks CRM, and the HairWorks CRM service once a salon uses it. We play two different roles:

• For visitors and for the salon owner who signs up, we decide why and how your details are used. We are the data fiduciary (the "controller").
• For the salon's own customers and staff whose details a salon puts into HairWorks CRM, the salon decides why they are used. We are only the processor: we store and handle that data on the salon's instructions, to provide the service.

2. What we collect

When you visit or sign up

• Details you give us: salon name, your name, mobile number, email address, the web address you choose for your salon, and your password (we keep only a one-way hash of it, never the password itself).
• Verification codes: the one-time codes we send you by WhatsApp or email, and whether you entered them correctly.
• Your agreement: when you continued past the notice on the sign-up page, the wording you were shown and the IP address you used.
• How you found us: the page that sent you, and any campaign tags in the link (utm_source, utm_medium, utm_campaign).
• Technical details: IP address and browser type, used to keep sign-up safe and to stop abuse.
• Messages you send us: what you write in the "Send us a message" form or on WhatsApp, with the contact details you give.

For your subscription

• Your plan, trial and subscription status, the invoices we issue and the billing details on them (such as a business name and GST number if you give one).
• Payment is handled by Razorpay. We receive the result of the payment and a reference to it. We never see or store your card, UPI or bank details.

Inside HairWorks CRM (the salon's data)

A salon decides what to enter. Typically this is its customers' names, mobile numbers, email addresses, gender, birthday (day and month) and anniversary, notes, appointments, sales, payments, packages, WhatsApp message history, and its staff members' names, contact details, shifts, attendance, commission and pay. It also includes the salon's own settings, logo and photographs it uploads.

3. How we use it

• To open your account, verify that the contact details are yours, and keep the sign-up free of bots and abuse.
• To take payment, issue GST invoices and manage your subscription.
• To run HairWorks CRM for your salon: show your data to you and your staff, send the WhatsApp and email messages you ask the service to send, and produce your reports.
• To contact you about your account, billing, setup and support, by WhatsApp, call or email.
• To answer your questions and fix problems.
• To protect the service, find faults, and meet legal and tax obligations.
• To understand which of our pages bring people to us (the campaign tags above). We do not build advertising profiles.

We do not sell personal data, and we do not use a salon's customer data for our own marketing.

4. WhatsApp and email

We use the WhatsApp Business Platform (provided by Meta) and email to send codes, account notices and service messages. For a salon that connects WhatsApp, the salon's own messages to its customers (receipts, reminders, campaigns) go through the same platform, using the salon's number and templates. The salon is responsible for having its customers' permission to message them.

You can stop our messages to you at any time by replying STOP or UNSUBSCRIBE on WhatsApp, or by telling us at the contact details below. We will still send messages that are necessary for your account, such as a payment receipt.

5. Who we share it with

We use a small number of service providers to run HairWorks. They handle data only for that purpose.

We may also disclose information when the law requires it, to respond to a valid legal request, or to protect the rights, safety and security of HairWorks, its users or others. If our business is ever sold or merged, personal data may move to the new owner, who must honour this policy.

6. Cookies

We use only the cookies the site and the service need to work: a session cookie that keeps you signed in, a security token that protects forms, and your light or dark display choice. We do not use advertising or tracking cookies on hairworks.in.

7. How long we keep it

• Sign-up details of someone who does not finish: kept for a limited time so you can come back to the step you were on, then removed or reduced to what we need to prevent abuse. One-time codes and the secrets used during sign-up are removed within days.
• A salon's account and data: kept while the subscription is active. When it ends or is cancelled, the salon can ask us to export or delete its data; we then delete it, apart from what we must keep.
• Invoices and payment records: kept for the period tax and accounting law requires.
• Messages you sent us: kept as long as needed to answer you and keep a record of the conversation.

8. Keeping it safe

Each salon's data is kept separate from every other salon's, and a salon's staff see only what their role allows. Connections to hairworks.in and to the service are encrypted, passwords are stored hashed, and the secrets we hold for payment and messaging are stored encrypted. No online service can promise perfect security. If we learn of a breach that affects your personal data, we will tell you and the authorities as the law requires.

9. Your choices and rights

Under India's Digital Personal Data Protection Act, 2023 and other applicable law, you can ask us to:

• tell you what personal data of yours we hold and how it is used;
• correct or complete it;
• delete it, when we no longer need it for the purpose or the law does not require us to keep it;
• stop contacting you, and withdraw a permission you gave.

To ask, write to us at the contact below. We may need to confirm it is you first, and we will reply within a reasonable time.

If you are a customer of a salon that uses HairWorks, your data is held by that salon, so please make the request to the salon. If you tell us instead, we will pass it to the salon.

10. Children

HairWorks CRM is for businesses and is not meant for children. We do not knowingly collect personal data from anyone under 18 for ourselves. A salon that records a child's details (for example, for a booking) is responsible for doing so lawfully.

11. Where data is processed

Our servers are with Hostinger. Some providers above, such as Meta and Cloudflare, may process data in other countries. Where that happens we rely on those providers' own safeguards and on the law that applies to them.

12. Changes to this policy

We will update this page when what we do changes, and change the date at the top. If a change is significant, we will also tell account owners by email or WhatsApp.

13. Contact us

For any question about this policy, to use your rights, or to make a complaint:

• Software Conduit (HairWorks CRM), VHPW+VV, Venugopal Reddy Layout, Arekere, Bengaluru, Karnataka 560076
• Email: support@hairworks.in
• Phone or WhatsApp: 9880489123 (Mon – Sat, 9:00 AM – 8:00 PM)
• Or use the form in the Contact section of the home page.

If you are not satisfied with our reply, you may complain to the Data Protection Board of India once it is in operation.