Privacy Policy

Salvoro is operated by JIN Solutions (“we”). It is software that salons and spas use to run their businesses. That creates two distinct relationships, and they are governed differently.

If you are a salon using Salvoro, we hold your business’s data on your behalf. You decide what is collected and why; we process it to provide the service.

If you are a customer of a salon that uses Salvoro, the salon holds your record and decides what to do with it. We store and process it for them. Requests to see, correct or delete your information should go to the salon directly, because it is their record — though we will help them action it.

Through Salvoro, a salon may record:

• Name, phone number and optionally email address
• Date of birth, where the salon records it for birthday messages
• Appointment and visit history, including services taken and staff seen
• Billing history, amounts charged and payment method
• Membership and loyalty balances
• Allergies and preferences, where the salon records them
• Feedback submitted through the post-visit link

Not all of this is required. A salon can operate with nothing more than a name and a phone number; the rest is recorded only if that salon chooses to.

• Name, phone number and email address
• Role and the permissions granted to them
• Attendance, shifts and leave
• Salary type, base pay and commission percentage
• Sign-in activity and actions recorded in the audit log

• To provide the service the salon has signed up for — bookings, billing, records and reporting
• To send messages the salon has configured, such as appointment reminders and invoices
• To authenticate users and keep accounts secure
• To bill for the subscription
• To diagnose faults and keep the service running

Providing the service requires sharing certain data with these processors:

• WhatsApp gateway (wa.jinsolutions.in) — Delivering messages the salon sends: reminders, invoices, follow-ups and campaigns. Receives the recipient's phone number and the message content.
• Razorpay — Processing subscription payments. Receives billing details; card details are handled by Razorpay and never stored by Salvoro.
• Email provider (SMTP) — Sending invitations and one-time codes, where email is used instead of WhatsApp.
• Object storage (S3-compatible) — Storing uploaded images such as salon logos, when configured.
• Google Analytics — Measuring how Salvoro's own public marketing pages are found and read. Receives page URLs and standard visit data from those pages only. It is not present inside a workspace, on a shared invoice link, or on a salon's booking page, so it receives no salon or customer records.
• Microsoft Clarity — Recording how Salvoro's own public marketing pages are used — scrolling, clicks and movement — to find where the site confuses people. Scoped identically to Google Analytics above, and likewise never present on a page showing salon or customer data.

Messages sent through WhatsApp also pass through WhatsApp’s own systems and are subject to their terms, which we do not control.

The measures in place are:

• Passwords stored as bcrypt hashes, never in readable form
• Signed session tokens with rotating refresh tokens and reuse detection
• Rate limiting on sign-in and one-time-code endpoints
• Isolation between businesses, applied centrally to every database query the application makes
• Branch-level scoping, so a manager cannot read another branch's records
• An audit log of changes to bills, staff and customer records, tagged with the branch, which the product never edits or deletes
• Traffic served over HTTPS with HSTS

Business records are retained for as long as the salon’s account is active, because the salon needs its own history. There is no automatic deletion schedule. If a salon closes its account and asks us to delete its data, we will do so; otherwise the data remains available to them.

Inside your workspace, Salvoro sets only the cookies it needs to function — there are no advertising cookies anywhere on this site, and none of the analytics below runs inside a workspace, on a shared invoice link, or on a salon’s own booking page.

On our public marketing pages we use Google Analytics and Microsoft Clarity to understand how those pages are found and read. Clarity records how a page is used — scrolling, clicks and movement — which we use to see where the marketing site confuses people. Neither runs on any page where a salon’s customer data is visible.

• access_token — Keeps you signed in to your workspace
• refresh_token — Renews your session without asking you to sign in again
• admin_token / admin_refresh_token — The same, for platform administrators
• theme — Remembers your light or dark preference
• _ga / _ga_* — Google Analytics, on our public marketing pages only — counts visits and which pages were read
• _clck / _clsk — Microsoft Clarity, on our public marketing pages only — groups one visitor's actions into a single session recording

You can ask to see what we hold about you, have it corrected, or have it deleted. If you are a salon customer, ask the salon first — the record belongs to them. If you are a salon using Salvoro, contact us at info@jinsolutions.in.

Grievances should be addressed to the contact details below. We are reachable Monday to Saturday, 10:00 AM – 7:00 PM IST and aim to reply within two working days.