Privacy Policy - GlimmerDesk

Template - review required. Replace the bracketed placeholders and have a lawyer review this against the privacy laws that apply to you (e.g. GDPR, CCPA, and HIPAA if you handle health information).

1. Who we are

[Your Business Name] ("we") uses GlimmerDesk to manage bookings and customer messaging. This policy explains what we collect and how we use it.

2. What we collect

Contact details - name, phone number, email address.
Booking details - services booked, dates/times, notes you provide.
Messages - texts and chats you exchange with us.
Payment status - handled by Razorpay; we do not store your card, UPI or bank details.

3. How we use it

To schedule, confirm, and remind you about appointments.
To answer your questions and provide our services.
To take payments where applicable.
To meet legal and tax obligations.

4. Messaging & consent

We send transactional texts/emails only after you opt in at booking. You can opt out of texts any time by replying STOP. We do not sell your contact information, and we do not share your phone number with third parties for their marketing.

5. Who we share it with

Only service providers that help us operate, under their own safeguards - for example our messaging provider (Twilio), email provider (Resend), payment provider (Razorpay), and hosting/database (Supabase, Vercel). We share only what is needed.

6. Data retention

We keep your information for as long as needed to provide our services and meet legal obligations, then delete or anonymize it.

7. Your rights

Depending on where you live, you may have the right to access, correct, or delete your data, or to object to certain processing. To make a request, contact us at [support email].

8. Contact

[Your Business Name], [address], [support email], [phone].