RuvorasRuvoras.

Privacy Policy

What personal data Ruvoras handles, why, how long it is kept, and the rights of the people it belongs to.

Last updated 1 September 2026

This policy explains how [[LEGAL ENTITY NAME]] handles personal data in connection with the Ruvoras platform and this website.

There are two distinct relationships, and the difference matters. For salon owners and staff who hold a Ruvoras account, we are the Data Fiduciary — we decide why and how that data is used. For the client and employee records a salon enters into the platform, the salon is the Data Fiduciary and we are its Data Processor, acting on its instructions.

1. Data we handle as Data Fiduciary

When you sign up for or administer a Ruvoras account we collect your name, business name, email address, phone number, business address, chosen plan and billing records.

We collect technical data automatically: IP address, device and browser information, and logs of actions taken in the product. These are used for security, abuse prevention, troubleshooting and understanding how the product is used.

If you contact us for support we keep a record of that correspondence so we can help you and improve the service.

2. Data we handle as Data Processor for a salon

A salon using Ruvoras enters data about its own clients and staff. This may include names, contact details, appointment and purchase history, service preferences and notes, loyalty balances, and photographs.

For staff it may additionally include date of birth, identity and KYC references, bank account details for salary payment, attendance records including location and photographic check-in where the salon has enabled it, salary, commission, advances and loan records.

We process this data only to provide the platform to the salon and on its instructions. We do not sell it, and we do not use it to market to a salon's clients on our own behalf.

Some of this is sensitive personal data under Indian law. Bank details are encrypted. Access is restricted to what an authenticated user's role permits, and the platform is designed so that one salon's data is not reachable from another's.

3. Why we process personal data

To provide, maintain and secure the platform; to authenticate users; to process subscription payments; to send service communications about your account; to provide support; to meet our legal and tax obligations; and to detect, investigate and prevent fraud, abuse and security incidents.

We rely on your consent where the law requires it, on the performance of our contract with you, and on our legitimate interest in operating and securing the service.

Marketing communications about Ruvoras are sent only where you have agreed to receive them, and every such message includes a way to stop receiving them.

4. Sharing

We share personal data with service providers who help us operate: hosting and infrastructure, payment processing, messaging delivery, error monitoring and analytics. They act on our instructions and are bound to protect the data.

We may disclose data where required by law, court order or a lawful request from a public authority, and where necessary to establish, exercise or defend legal claims.

If the business is involved in a merger, acquisition or transfer of assets, data may transfer as part of it. You will be told before your data becomes subject to a materially different policy.

We do not sell personal data.

5. Storage, location and retention

Data is stored on servers operated by our infrastructure providers. Where data is transferred outside India, we take steps to ensure it remains protected to the standard required by applicable law.

Account data is retained while the account is active. After termination, salon data remains available for export for 30 days and is then deleted or irreversibly anonymised, except where law requires longer retention — for instance financial and tax records.

Backups are retained on a rolling basis and are overwritten in the ordinary course. Deletion from live systems may therefore precede deletion from backups by a short period.

6. Security

We use technical and organisational measures appropriate to the risk, including encryption in transit, encryption of particularly sensitive fields such as bank details, role-based access control, tenant isolation, audit logging and regular review of access.

No system is perfectly secure. If a personal data breach occurs that is likely to affect you, we will notify you and the Data Protection Board as required by law and without undue delay.

You play a part too: use a strong unique password, do not share accounts between staff, and remove access promptly when someone leaves.

7. Your rights

Under the Digital Personal Data Protection Act, 2023 you have the right to access a summary of your personal data and how it is processed, to have inaccurate data corrected, to have data erased where it is no longer needed, to nominate someone to exercise your rights if you cannot, and to complain.

To exercise these rights in relation to your Ruvoras account, contact hello@ruvoras.com. We will respond within the time the law allows.

If you are a client or employee of a salon that uses Ruvoras, your relationship is with that salon. Please direct your request to them; they control that data and we will assist them in answering you.

8. Cookies and similar technologies

This website and the product use cookies and similar storage that are necessary to keep you signed in, remember preferences, and keep the service secure.

Where we use analytics to understand how the site is used, we do so in a way that does not identify you personally wherever practical. You can control cookies through your browser, though disabling necessary cookies will prevent the product from working.

Our signup form uses Google reCAPTCHA to distinguish genuine sign-ups from automated abuse. Its use is subject to Google's own Privacy Policy and Terms of Service.

9. Children

Ruvoras is a business tool and is not directed at children. We do not knowingly collect personal data of a child as a Data Fiduciary. A salon that records data about a minor client is responsible for obtaining verifiable consent from a parent or guardian as the law requires.

10. Changes and how to reach us

We may update this policy. Where a change is material we will give notice by email or in-product before it takes effect, and the date at the top of this page will be revised.

Grievance Officer: [[GRIEVANCE OFFICER NAME]]. Email [[GRIEVANCE EMAIL]].

[[LEGAL ENTITY NAME]], [[REGISTERED OFFICE ADDRESS]]. Email hello@ruvoras.com · Phone +91 81465 71596