The short version. We collect what we need to run your studio account. Client details you enter belong to you and we process them only on your behalf. We don't sell personal data. You can ask us to export or delete your data at any time.
Who we are
GlamUp CRM (the “Service”) is operated by Cyberhackz Labs Pvt Ltd (“GlamUp CRM”, “we”, “us”), India. The Service includes the website at glamupcrm.com, the web app at app.glamupcrm.com, and the GlamUp CRM Android app.
This policy applies to studio owners and their staff who use the Service, to people who make a booking through a studio's public booking link, and to visitors of our website.
Information we collect
| Category | What it includes | Why |
|---|---|---|
| Account details | Name, email address, phone number, password (stored hashed, never in plain text), studio name, address, GSTIN and logo. | Create and secure your account, issue invoices, contact you. |
| Business records | Bookings, services, prices, payments and invoices, expenses, inventory, staff records, attendance and commissions. | Provide the CRM features you use. |
| Client details you enter | Your clients' names, phone numbers, email addresses, notes, booking and payment history, loyalty points. | Let you manage and message your own clients. |
| Booking-link submissions | Name, phone, email, date and service details someone enters on a studio's public booking page. | Deliver the booking request to that studio. |
| Location | Your device's location at the moment you tap attendance check-in, only if you grant permission. | Verify staff are at the studio when they check in. |
| Device and usage data | Device type, app version, IP address, log entries, error reports, and push-notification tokens. | Keep the Service working, secure and supported. |
| Support messages | What you send us through support tickets or email, and any attachments. | Answer your question and improve the Service. |
| Subscription details | Plan, billing status and payment references. We don't store full card numbers. | Manage your plan and billing. |
We collect location only when you use the check-in feature and only after you allow it in your device's permission prompt. You can turn the permission off in your device settings at any time; check-in that requires location will then not be available.
How we use information
- To provide, maintain and improve the Service, including syncing your data between devices and while offline.
- To send the messages you ask the Service to send, such as booking confirmations and reminders by SMS, WhatsApp or email.
- To send you service notices: sign-in codes, password resets, billing and security alerts, and important changes.
- To protect the Service and its users — preventing fraud, abuse and unauthorised access.
- To respond to support requests and to meet legal obligations.
We don't sell personal data, and we don't use your clients' details for our own marketing.
Your clients’ data
For the client records, bookings and payments that a studio enters into GlamUp CRM, the studio is the one who decides why and how that data is used, and we process it on the studio's behalf to run the Service. If you are a client of a studio and want to see, correct or delete your information, please contact that studio first; we'll support the studio in responding.
Studios are responsible for having a lawful basis, and where required, consent, to store their clients' details and to message them. Please only message clients who have agreed to hear from you.
Who we share data with
We share information only as needed to run the Service:
- Within your studio. Owners and staff see the data their role permits.
- Service providers that host our infrastructure, deliver email, and send SMS or WhatsApp messages. They process data only to provide those services to us. Studios may also connect their own SMS gateway account, in which case the messages are sent through that provider.
- Advertising partners on the Free plan — see the next section.
- Authorities and advisers where we are legally required to, or to protect our rights, users or the public.
- A successor if we are involved in a merger, acquisition or sale of assets; we will tell you if your data becomes subject to a different policy.
Advertising and cookies
Studios on the Free plan may see ads in the web app, served by Google AdSense. Google and its partners may use cookies or similar technologies to show and measure ads. You can learn how Google uses data from sites that use its services, and manage ad personalisation, at policies.google.com/technologies/partner-sites and adssettings.google.com. Paid plans do not show ads.
We also use browser storage (such as local storage) to keep you signed in, remember preferences like dark mode, and hold unsynced changes while you're offline. Blocking this storage may stop parts of the Service from working.
How long we keep data
We keep your account and business data for as long as your account is active. If you close your account, we delete or anonymise your data within a reasonable period, except where we must keep certain records (for example invoices and tax records) to meet legal obligations or to resolve disputes. Backups are overwritten on a rolling schedule.
Security
Data is sent over encrypted connections (HTTPS). Passwords are stored hashed. Access to each studio's data is isolated by account and controlled by role, and sign-in sessions expire. No system is perfectly secure, so please use a strong, unique password and keep your devices secure. If we learn of a breach that affects your data, we will notify you as the law requires.
Your rights and choices
Subject to applicable law, including India's Digital Personal Data Protection Act, 2023, you can:
- Access the personal data we hold about you and ask us to correct it.
- Ask us to delete your data or close your account — see how to delete your account.
- Export your business data.
- Withdraw consent you've given, for example location permission or marketing messages.
- Raise a grievance with us, and if it isn't resolved, with the relevant data protection authority.
To use any of these, email namansethi.com@gmail.com from the address on your account. We may need to verify your identity before acting on a request.
Children
The Service is for businesses and is not directed at children under 18. We don't knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we'll delete it.
Changes to this policy
We may update this policy from time to time. When we make a material change we'll update the date at the top and, where appropriate, notify you in the app or by email. Continuing to use the Service after a change means you accept the updated policy.
Contact us
Cyberhackz Labs Pvt Ltd
Email: namansethi.com@gmail.com