Privacy policy

This policy explains what personal data Betta Beaut collects, why, where it is kept, and how you can see, correct, download or delete it. It is written for India's Digital Personal Data Protection Act, 2023.

Who we are

Betta Beaut runs the bettabeaut.com website, the customer app and the business app for salons and beauty businesses. Our registered business details will be listed here before launch.

What we collect, and why

• Account: your mobile number or email, and your name if you give it — to log you in on any device.
• Face scan (customers): with your separate consent, a photo of your face is analysed to score six skin concerns. By default only the scores are kept and the photo is deleted after analysis. You choose whether to keep photos for progress comparisons.
• Questionnaire: skin history, city, climate, lifestyle, budget — to build your plan.
• Orders and bookings: delivery address, phone and what you bought or booked — to deliver and to let the salon serve you.
• Business accounts: business details, staff, and the client records a business adds. The business is responsible for having its clients' permission; Betta Beaut processes those records on its behalf.
• Security: the devices and approximate network you log in from — to show you where you're signed in and alert you to new logins.

Consent

We ask for consent separately for each purpose: the face scan, analytics, and marketing messages. Each consent is recorded with the date and the version of the notice you saw. You can withdraw any consent at any time; withdrawing doesn't affect anything already done.

People under 18 cannot use the face scan without verifiable consent from a parent or guardian.

Where your data is stored

Your data is stored on our servers, not on your phone or browser, so it is the same on every device you log in from. Production data is stored in India (Mumbai region), backed up daily, and can be restored to any point in time.

Who we share it with

• The salon you book with, or the business that added you as a client — only what they need to serve you.
• Service providers who work for us under contract: hosting, SMS and WhatsApp delivery, payments, and the face-analysis provider.
• Authorities, only when the law requires it.

We never sell your data. Brands do not pay to appear in your plan.

Your rights

You can see, correct, download and delete your data from your account, and withdraw consent at any time. Requests are completed within 30 days. You can also write to our grievance officer.

How long we keep it

Account data is kept while your account is open. Face photos are deleted after analysis unless you choose to keep them. Invoices are kept for the period tax law requires. When you delete your account, everything else is deleted within 30 days.

Security and breaches

Data is encrypted in transit; health and allergy notes are encrypted at rest. Every view of a face image or client health note is logged. If a breach affects you, we will tell you and the Data Protection Board as the law requires.