Privacy Policy

When you create an account, we collect your name, business name, phone number, and location. When you use our booking features, we may also collect client names, appointment details, and financial information such as service fees and payment records.

We automatically collect device information (model, operating system, unique identifiers), usage data (features accessed, time spent), and network information. This helps us improve app performance and stability.

We collect general location information (such as city or neighborhood) provided by you to place your professional profile on our public marketplace search. We do not access precise GPS coordinates of your device unless you grant us explicit permission through your device's settings to identify nearby services.

When you upload photos to your portfolio, you grant us access to the specific images you select. These are stored and displayed publicly to power your Glammery portfolio on the marketplace. We do not access your full photo library.

Your business data is stored on secure cloud infrastructure. Photos uploaded for your portfolio are processed via Cloudinary, a cloud-based media management service, solely for the purpose of storing and displaying your work. Cloudinary's privacy policy applies to data processed through their service.

Subscription plans and WhatsApp quota top-ups are processed securely via our payment gateway partner, Razorpay, or through Apple's In-App Purchase system for iOS users. We do not store or retain credit/debit card numbers, CVVs, net banking credentials, or UPI details on our servers. All transactional details processed via Razorpay are encrypted in compliance with Payment Card Industry Data Security Standards (PCI-DSS). All iOS in-app transactions are processed directly by Apple under Apple's standard App Store privacy and billing policies, and we do not collect or store your Apple ID financial details.

We use third-party APIs (specifically MSG91) to send transactional WhatsApp messages, daily schedules, OTPs, and booking confirmations to artists and their respective clients. Phone numbers are processed through these communication channels solely to facilitate message delivery. We do not share phone numbers with third parties for marketing or promotional activities.

All client names, phone numbers, and booking records uploaded by you are isolated and stored securely in segregated databases. We do not sell, share, or lease this information to third parties, nor do we use MUA client databases to target advertisements or promotions. Phone numbers are processed through communication providers (such as MSG91) strictly to deliver service alerts, booking confirmations, or payment receipts as initiated by your activity.

We use anonymized analytics to understand how the app is used. No personally identifiable information is shared with analytics providers.

5.1 Fraud Prevention: To prevent abuse of promotional offers (such as free trial periods), we retain a minimal record of your registered phone number in a separate fraud-prevention ledger even after account deletion. This record contains only your phone number and the date the trial was granted — no other personal data, business data, or client information is retained. This is done under the legitimate interest of preventing repeated fraudulent sign-ups, as permitted under the Digital Personal Data Protection Act, 2023.

5.2 Financial Records: Anonymized transaction records (subscription payments, top-up purchases) may be retained for up to 8 years as required under the Income Tax Act, 1961 (Section 44AA) and applicable GST regulations. These records do not contain personally identifiable information after anonymization.

5.3 Business Transfers & Mergers: In the event that Kshiti Software Solutions undergoes a business transition, such as a merger, acquisition by another company, sale of all or a portion of its assets, or corporate restructuring, your personal information and uploaded data will likely be among the assets transferred to the acquiring or successor entity.

5.4 Business Dissolution & Permanent Shutdown: If we permanently shut down the Platform or close the company, we will make reasonable commercial efforts to notify users in advance to export their data. Following the closure date, all personal data, client databases, portfolio images, and user records stored on our servers will be permanently deleted from our databases and backups within a reasonable time frame, except where retention is required under applicable legal or regulatory frameworks.