Privacy Policy

This policy applies when you visit this website, join the waitlist, contact Glammy, submit a data-deletion request or otherwise communicate directly with Glammy about the pre-launch product.

When the salon product becomes available, Glammy may act in different roles depending on the processing. A salon will ordinarily decide why and how it uses information about its clients and team, while Glammy may process that information for the salon under an agreement and documented instructions. Glammy will remain responsible for data it uses for its own account administration, security, legal compliance and direct business communications. Final contracts and product documentation will define these roles before launch.

• Waitlist information: name, business or salon name, role, email address, optional phone number, optional city, optional message and the waitlist consent record.
• Separate marketing choice: whether you actively chose to receive broader Glammy marketing. The box is not preselected and is separate from the request to join the waitlist.
• Contact information: details and message content you submit when asking a question or corresponding with Glammy.
• Deletion-request information: name, email address, optional account or connected-platform identifiers, requested scope, explanatory message, acknowledgement and verification correspondence.
• Request and security metadata: request time, technical request details such as IP address and user agent where generated by hosting or security systems, validation results and privacy-conscious logs used to detect abuse or troubleshoot a failed request.
• Email-delivery metadata: message identifier, delivery status and related technical events processed by Resend when form email delivery is enabled.

Most current information comes directly from you when you complete a form or send a message. Hosting, security and email-delivery services may generate limited technical metadata as part of receiving the request, preventing abuse and delivering the corresponding email.

Glammy does not purchase contact lists for this website. If information is received from another person or business, Glammy will assess whether it has a proper reason to retain and use it and will provide applicable information or delete it where required.

• Respond to enquiries and administer the early-access waitlist.
• Send information requested as part of a submission and, only when separately chosen, broader product marketing.
• Verify and fulfil access, correction, deletion or other privacy requests.
• Secure the website, prevent spam or misuse, diagnose failures and preserve necessary evidence of consent or a request.
• Comply with applicable legal duties and establish, exercise or defend legal claims where necessary.
• Understand aggregated waitlist interests without using personal data for unrelated profiling.

The applicable legal justification may include your consent, steps taken at your request, legitimate and proportionate business or security needs, and compliance with law, depending on the context and the law that applies. Consent may be withdrawn for future consent-based processing without affecting prior lawful processing.

If Glammy launches customer accounts, an authorised salon may choose to enter or connect business, staff, client and operational information. Depending on released features, this could include account and role details; services and availability; appointments; client contact and preference records; consent choices; factual service notes; billing and payment-status records; products and stock activity; team schedules; communications; support requests; and operational reports.

Before collecting this information, Glammy will publish the actual product scope, contractual roles, instructions, retention settings, security controls, service providers and request procedures. Salons will be responsible for having an appropriate basis to collect client and staff data, providing required notices, respecting permissions and limiting access within their teams.

Potential future Meta categories include business, Page and ad-account identifiers; account and asset metadata; authorisation information and access tokens; campaign configuration and performance data; lead submissions; permitted messages and conversation metadata; posts, media and publishing data; catalogue and product information; Threads data; WhatsApp business and template information; and records of customer-directed actions.

The specific data and permissions would depend on the capability a customer actively enables. Glammy intends to request only permissions needed for that capability, act only on authorised assets, maintain human review for consequential publishing or advertising actions, and document how a connection can be removed.

• Glammy will not sell Meta Platform Data.
• Glammy will not combine one salon’s Meta Platform Data with another salon’s data.
• Glammy will not use Meta Platform Data for unrelated profiling or model training.
• Glammy will stop future synchronisation after an integration is disconnected.
• Glammy will not use a customer-initiated message or supplied phone number as blanket permission for unrelated marketing.

Glammy may disclose current website data to service providers that host the website, protect it, deliver requested emails or support lawful operations. These providers should receive only the information needed for their service and be subject to appropriate terms. The public Subprocessors page identifies the production providers intended for launch and must be updated if that setup changes.

Information may also be disclosed when required by applicable law, a valid legal process or a necessary response to protect rights, safety and service integrity. If Glammy participates in a genuine business reorganisation, affected information may transfer subject to applicable notice and protection requirements. Glammy does not sell waitlist or contact information.

Waitlist and contact information is retained while the request remains active, while Glammy has a valid reason to provide requested updates and for a limited period needed to document consent, resolve disputes, prevent abuse or comply with law. Unsubscribing stops future consent-based marketing but may not remove a minimal suppression record needed to honour that choice.

Verified deletion requests are intended to remove deletable active data within 30 calendar days. Some security logs, backup copies, transaction evidence or legally required records may be isolated from ordinary use and retained for a documented period before secure expiry. Glammy will explain the category, reason and retention period when an exception applies to a verified request.

Website hosting and email-delivery providers may process data outside your state or country. Glammy will assess the production locations and safeguards offered by its providers and use contractual or other lawful transfer measures where required. The Subprocessors page will identify provider purpose and available location information.

Glammy uses or plans proportionate administrative, technical and organisational measures for the website, including secure transport, restricted administrative access, request validation, abuse controls, security headers, privacy-conscious logging, dependency maintenance and incident handling. No internet service can guarantee absolute security, and Glammy does not claim a security certification on this website.

If you believe information submitted to Glammy may be at risk, contact Glammy promptly and do not include passwords, access tokens or unnecessary sensitive data in the initial report.

Depending on applicable law and the context, you may request access to information about you, correction, deletion, restriction or objection, a copy of eligible data, withdrawal of consent, information about processing, or grievance handling. Some rights are subject to legal conditions and exceptions.

• Use the public Data Deletion page for a deletion request.
• Email contact@glammyapp.in for access, correction, consent withdrawal or another privacy question.
• Provide enough information to identify the relevant request, but never send a password or access token.
• Glammy may take proportionate steps to verify identity and authority before disclosing or deleting information.

If the request concerns data controlled by a salon using a future Glammy product, the salon may need to make the decision and Glammy may assist it under the applicable service agreement.

The waitlist and business website are not directed to children and should not be used by anyone who cannot lawfully provide the requested information or agreement. Glammy does not knowingly seek children’s data through public forms. Contact Glammy if you believe a child submitted information so the circumstances can be reviewed.

Glammy will update this policy when the website, product, integrations, providers or legal obligations materially change. The updated date will be revised, and additional notice will be provided when required. A planned capability will not be treated as covered merely because it appears on a roadmap; the policy must accurately describe live processing before that capability is activated.

Send privacy questions or grievances to contact@glammyapp.in or use the business contact details shown on this page. Include the email address associated with the request and a concise description of the issue. Glammy will acknowledge and assess the request, may seek verification, and will communicate any decision or required next step.