Privacy Policy

What Data We Collect

Glowgramm collects the following types of information to provide and improve our services:

• Profile information: Name, photos, bio, and other details you provide when creating your profile
• Contact information: Phone number and email address for account communication and authentication
• Location data: Your general location for local discovery features (optional, used only with your consent)
• Booking history: Records of appointments you've booked or fulfilled through the platform
• Payment references: UPI reference numbers for booking deposits (we do not store card details, bank information, or process payments directly)
• Uploaded media: Photos, videos, and portfolio content you share on the platform
• Device and usage data: Information about how you use the app, including session duration and feature interactions

ID Verification Data

For professionals who choose Standard or Premium Verification, we collect government ID documents (such as Aadhaar) and/or selfie photos for identity verification purposes. After verification is complete, raw ID documents and selfie photos are securely deleted from our systems. We retain only the verification status (verified/not verified) and basic identity confirmation. We do not store or retain copies of your ID documents or selfie photos beyond the verification process.

How We Use Your Data

We use your information to:

• Match customers with beauty professionals based on location, services, and preferences
• Enable discovery features and personalized recommendations
• Send booking confirmations, reminders, and service updates
• Prevent fraud, enforce our terms, and maintain platform security
• Improve our services and develop new features
• Communicate with you about your account and support requests

Data Sharing

We share your information in limited circumstances:

• With professionals: When you make a booking, we share necessary details (name, contact info, booking details) with the professional to fulfill the appointment
• With service providers: We work with trusted third-party services to operate the platform, such as Resend for email delivery and Supabase for hosting. These providers have access only to the data needed to perform their services
• We do not sell your data: Glowgramm does not sell your personal information to third parties for marketing purposes
• Legal requirements: We may disclose information when required by law or to protect our rights and safety

Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you
• Correct: Update or correct inaccurate information in your profile
• Delete: Request deletion of your account and associated data from Settings → Account security → Delete account. Your account is disabled immediately and queued for admin review before data is permanently purged.
• Opt out: Unsubscribe from promotional communications while keeping essential account notifications

For access or correction requests, contact us through Help & Support in your account settings.

Data Retention

We retain your data for as long as necessary to provide our services and fulfill legal obligations. When you delete your account, we will remove your personal data from our active systems, though we may retain certain information in backup archives or as required by law. Booking records may be retained for a longer period to resolve disputes and maintain platform integrity.

Cookies and Tracking

Glowgramm uses a small number of cookies and similar technologies that are needed to run the service. We do not use third-party advertising trackers (such as Meta Pixel, Google Analytics advertising tags, or similar cross-site ad pixels) that follow you around the web to build advertising profiles.

Essential and functional cookies

These cookies are required for Glowgramm to work. They are not used for advertising:

• Authentication (Supabase session): Keeps you signed in securely across page loads. Without this cookie, you would have to log in on every visit.
• Pre-launch access: A signed cookie that remembers when you have entered a valid invite passcode during pre-launch, so you are not asked again on every visit.
• Admin session: Used only for the admin console after a successful admin login, so staff access stays separate from normal consumer sessions.
• Referral attribution: Stores a referral code temporarily when you arrive via a invite/referral link, so we can credit the referrer after you create an account. It is not used for ads or cross-site tracking.

Vercel Web Analytics (cookieless)

We use Vercel Web Analytics, which is designed to be cookieless. It does not set third-party analytics cookies on your device. Instead, visits are counted using a temporary hash derived from the request. According to Vercel's documentation, that visitor hash is discarded after about 24 hours and is not used to track you across different websites or days.

Analytics data is collected in aggregated form to understand product usage — for example page views, referrers, device type, browser/OS, and coarse location (such as country/region/city). It is not used for cross-site advertising or building marketing profiles about you.

Error and reliability monitoring (Sentry)

We use Sentry to capture application errors and related performance signals so we can fix crashes and keep Glowgramm reliable. This monitoring is for engineering reliability, not for advertising or tracking you across other websites.

Children's Privacy

Glowgramm is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a minor, we will take steps to delete it promptly.

Security Measures

We implement multiple layers of security to protect your information:

• Access controls: Role-based permissions ensure that only authorized personnel can access your data
• Rate limiting: Automated systems prevent unauthorized access attempts and protect against abuse
• Audit logging: We maintain logs of system access and changes to monitor for suspicious activity
• Encryption: Data is encrypted in transit and at rest using industry-standard security practices

Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated through the app, and the "Last updated" date will be revised. Your continued use of Glowgramm after changes constitutes acceptance of the updated policy.

Contact for Privacy Concerns

If you have questions about this Privacy Policy or how we handle your data, please contact us through the Help & Support section in your account settings. We will respond to privacy-related inquiries promptly.