1. Who we are
Aura is a salon management platform built for Indian salons. We provide appointment scheduling, point-of-sale billing, customer relationship management, staff management, inventory tracking, finance tools and branch-aware operations through a web and mobile interface.
When this policy mentions “Aura,” "we," or "us," it refers to the team operating the Aura platform.
2. What data we collect
Account and business data
When a salon owner or staff member creates an account, we collect name, email address, phone number, salon name, branch details and role/permission settings. This information is necessary to provide the service.
Customer data entered by salons
Salons may enter their customers' names, phone numbers, visit history, preferences, allergies and consultation notes into Aura. This data belongs to the salon. We process it on their behalf to provide CRM, booking and billing features.
Booking and transaction data
Appointments, invoices, payments, staff assignments, attendance records and inventory movements are stored as part of normal platform operation.
Device and usage data
We collect standard web logs, browser type, device information and page interaction data to maintain and improve the platform. We do not sell this data to advertisers.
3. How we use your data
- To provide and maintain the Aura platform
- To process bookings, billing and staff operations
- To send transactional notifications (appointment confirmations, reminders) through configured channels
- To detect and prevent security issues
- To communicate about your account and service updates
4. Data ownership
Your salon's data belongs to you. When you enter customer records, staff information, financial data or any other business content into Aura, you retain ownership. We do not use your business data to train models, build profiles for advertising or share with competitors.
5. Data sharing
We share data only when:
- You explicitly configure an integration (WhatsApp provider, payment gateway, SMS service)
- Required by law or valid legal process
- Necessary to protect the safety of our users or the public
- Needed to operate core platform functions (hosting, database, infrastructure providers under appropriate agreements)
We do not sell personal data to third parties.
6. Data security
Aura uses industry-standard measures: encrypted connections (TLS), hashed passwords, role-based access controls, tenant-isolated records and branch-scoped permissions. We support two-factor authentication and passkey login for additional account security.
No system is completely secure. If you discover a security issue, please report it to us promptly.
7. Data retention
We retain your data while your account is active and for a reasonable period afterward to support account recovery and legal obligations. You can request data deletion by contacting us, subject to any legal retention requirements.
8. Your rights
Depending on applicable law, you may have the right to access, correct, export or delete your data. Contact us to exercise these rights.
9. Changes to this policy
We may update this policy as the platform evolves. Significant changes will be communicated through the platform or by email.
10. Contact
Questions about this policy can be sent through our contact page.