Privacy policy

Draft — to be reviewed by a lawyer before launch. This policy is a working draft. It is not yet final and may change before Frizzi launches publicly.

This policy explains how Frizzi handles personal data when you use the Frizzi Business app (for salon owners and their staff), the Frizzi app (for salon clients) and this website. We follow India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and the rules made under it, and the Information Technology Act, 2000.

1. Who we are

“Frizzi”, “we” and “us” mean [legal name of the company — to be confirmed], with its registered office at [registered address — to be confirmed], India. We run the Frizzi platform at frizzi.app.

2. Who decides about your data

If you are a salon’s client: each salon decides what it records about its own clients (for example your visits and bills). For those records the salon is the Data Fiduciary under the DPDP Act, and Frizzi processes them on the salon’s behalf as its Data Processor. Questions about what a salon holds about you are best asked to that salon first; we will help.
If you use the Frizzi app: Frizzi is the Data Fiduciary for your app account (your sign-in, bookings you make in the app, reviews and app settings).
If you run a salon or work at one: Frizzi is the Data Fiduciary for your sign-in account. Your salon is the Data Fiduciary for the work records it keeps about its staff (attendance, pay and documents).

3. What we collect

People who use the Frizzi app (clients)

Mobile number and name, to sign you in with a one-time code and show your name to the salons you book with.
Bookings, waitlist and queue entries you make, any note you write, and any coupon or referral code you use.
Ratings, reviews and private feedback you give. Other people see only your first name and last initial; the salon sees your full name and the bill.
Location, only if you allow it, to show salons near you. It is used to sort salons by distance and is not saved to your profile. You can choose an area instead.
Messages to our help desk, and any photo you attach.
Device details for notifications (a push token) and your notification and theme choices.

A salon’s clients (kept by the salon in Frizzi Business)

Name, mobile number, and if the salon or you add them: gender, birthday, anniversary, address (needed on invoices of ₹50,000 or more), notes and how you heard about the salon.
Visits, bills and receipts, appointments, wallet money and dues, packages, memberships, points and gift vouchers.
Your choices about messages: whether you agreed to WhatsApp messages and to offers. We record when you agreed.
Messages sent to you, and when.

The app matches a salon’s client record to a Frizzi app account by mobile number, so you can see your own visits at that salon. One salon never sees another salon’s records about you.

Salon owners and staff

Name, mobile number and role at the salon, and the branches you cover.
Your PIN, which we store only in a scrambled (hashed) form that cannot be turned back into the PIN.
Attendance: check-in and check-out times and, when the salon uses GPS check-in, your location at those moments. If the salon turns on selfie check-in, a photo taken at check-in; these photos are deleted after 90 days.
Work records the salon keeps: commission, earnings, advances, payroll and payslips, moves between branches, and ID documents if the salon stores them (kept privately, opened only through short-lived links, and every view is logged).
With your agreement by SMS code, a salon can see your work history at other salons on Frizzi.

Salon business details

Salon and branch names, addresses, GSTIN, UPI IDs, the menu, bills, expenses (and bill photos), stock and supplier details, and plan invoices. Some of this can include personal data, for example a sole owner’s name.

Records we keep for safety

An activity log of important actions in a salon (for example a cancelled bill or a correction), with who did it.
Server logs with IP addresses and times, used to keep the service secure, stop abuse (such as too many sign-in codes) and fix problems.

We do not collect card numbers or bank passwords. There is no online payment in the Frizzi app: clients pay at the salon.

4. Why we use it

To provide the service: sign-in, billing, bookings, reminders, the walk-in queue, attendance, payroll and reports.
To send messages you or your salon asked for: receipts, booking reminders, updates and payslips. Offers go only to clients who agreed to receive them, never between 9 pm and 9 am.
To show salons, offers and reviews in the Frizzi app.
To keep records the law requires, for example GST invoices.
To keep Frizzi secure, prevent fraud and misuse, and fix problems.
To answer your help requests.

We rely on your consent (which you can withdraw at any time, for example by turning off offers or deleting your account) and on the legitimate uses the DPDP Act allows, such as following the law. We do not sell personal data, and we do not use it for advertising profiles. Salons that pay to be shown first in the Frizzi app are always marked “AD”.

Salons: when you book at, visit or join the queue of a salon, that salon sees your name, number and booking.
Service providers who help us run Frizzi, only for that purpose and under contract:
- Amazon Web Services (servers and backups);
- Google Firebase (push notifications and phone-number sign-in codes);
- Meta’s WhatsApp Business platform (WhatsApp messages), and an SMS provider for text messages.
Authorities, when the law requires it.

6. Where it is kept

Our main servers are in India (Mumbai). Encrypted backups may be kept in another AWS region, and our service providers may process data outside India, as the DPDP Act allows, except in countries the Government of India restricts.

7. How long we keep it

Your Frizzi app account: until you delete it. Deleting it removes your sign-in and signs you out everywhere.
Bills and invoices: as long as tax law requires (GST law requires records to be kept for several years), even after an account is deleted. Salons keep their own client records and bills for this reason.
Selfies at check-in: 90 days.
Sign-in codes: only minutes.
Server logs: only as long as needed for security.

Salon owners can download all their salon’s data at any time.

8. How we protect it

All traffic uses HTTPS. PINs are stored only as hashes.
Each salon’s data is kept apart: every request is checked for the person’s role and branches, and the database itself blocks one salon from reading another’s data.
Private files, such as ID documents and selfies, are never on public links.
Important actions are logged.

If a personal data breach happens, we will tell the Data Protection Board of India and the people affected, as the DPDP Act requires.

9. Your rights

Under the DPDP Act you can:

ask what personal data we hold about you and how it is used;
ask us to correct, complete or update it;
ask us to erase it, unless the law requires us to keep it;
withdraw your consent at any time (this does not affect what was done before);
nominate someone to use these rights for you if you die or cannot act;
have your grievance answered by us, and then complain to the Data Protection Board of India if you are not satisfied.

In the Frizzi app you can change your name, turn off notifications and delete your account yourself. For anything else, write to us (below).

10. Children

Frizzi is meant for people aged 18 and over. A child’s salon visits can be recorded by a salon with a parent’s or guardian’s agreement. We do not knowingly create Frizzi app accounts for children, track children or show them targeted ads.

11. This website

This website uses no cookies, no analytics and no trackers, and loads nothing from other websites. Our server records basic request logs (such as IP address, time and page) for security.

12. Changes

We will update this page when our practices change, and change the date at the top. For important changes we will tell you in the apps.

13. Contact and grievances

Write to us at hello@frizzi.app. Our Grievance Officer is [name — to be confirmed], reachable at the same address. We will answer within the time the law requires.