Privacy Policy

1. Introduction

OPHTHAVUE INNOVATIVE SOLUTIONS operates Anazla, a salon management software platform at anazla.com. This Privacy Policy explains what data we collect, how we use it, and your rights. This policy complies with the Information Technology Act, 2000 and the Digital Personal Data Protection Act (DPDP), 2023 of India.

2. Information We Collect

Information You Provide

• Account Information — name, email address, encrypted password
• Salon Information — salon name, logo, services, pricing, and settings
• Billing Records — customer names, mobile numbers, services rendered, products used, payment amounts
• Inventory Data — product names, stock quantities, pricing, usage records
• Staff Information — staff member names you add to the platform
• Payment Information — subscription transaction records (we do not store card or UPI details)

Information Collected Automatically

• Device information — browser type, operating system
• Usage data — features used, time on platform
• Log data — IP address and error logs for security purposes

Your Customers' Data

Customer names and mobile numbers you enter belong to you. We process this data only on your behalf as a data processor. You are the data controller for your customers' information.

3. How We Use Your Information

• Provide, operate, and maintain the Anazla platform
• Create and manage your account and subscription
• Process subscription payments
• Send service-related communications (account activation, support)
• Improve platform features and user experience
• Detect and prevent fraudulent or unauthorised use
• Comply with legal obligations under Indian law

4. Data Sharing

Third-Party Service Providers

• Supabase Inc. — database and authentication (AWS infrastructure, Singapore region)
• Cloudflare Inc. — content delivery and hosting
• Payment processors — for subscription payments only (no Salon Data shared)

WhatsApp / Meta

When you use WhatsApp features, customer phone numbers are transmitted to WhatsApp for message delivery, subject to Meta's Privacy Policy. Ensure you have customer consent before sending marketing messages.

Legal Requirements

We may disclose data if required by Indian law or valid government requests.

5. Data Security

• All data transmitted using TLS/HTTPS encryption
• Passwords stored in encrypted form — never in plain text
• Row-Level Security ensuring each salon accesses only its own data
• Access controls limiting data access to authorised personnel
• Regular security reviews

6. Data Retention

Your data is retained while your subscription is active. Upon termination, data is retained for 90 days during which you may request a full export. After 90 days, all data is permanently and irreversibly deleted.

7. Your Rights

Under the DPDP Act, 2023 and applicable Indian law, you have the right to:

• Access — request a copy of your personal data
• Correction — request correction of inaccurate data
• Erasure — request deletion of your data
• Withdraw Consent — where processing is consent-based
• Grievance Redressal — have grievances addressed within 30 days

To exercise any right, contact info@anazla.com. We respond within 30 days.

8. Children's Privacy

Anazla is not intended for users under 18. We do not knowingly collect data from children. Contact us immediately if you believe we have done so.

9. Cookies

We use browser local storage (not third-party cookies) to maintain your login session and preferences. We do not use advertising cookies or tracking technologies.

10. Changes to This Policy

We may update this policy with 14 days' notice for material changes. Continued use after the effective date constitutes acceptance.

11. Grievance Officer

In accordance with the Information Technology Act, 2000, our Grievance Officer can be reached at: