Privacy Policy

Rizarv Technologies Private Limited ("Rizarv", "we", "us", or "our") operates the website rizarv.com and its corresponding customer and partner mobile applications (collectively, the "Platform"). This Privacy Policy describes how we collect, use, store, process, and protect your personal information when you use our Platform to discover, schedule, and book salon, spa, and beauty services.

1. Consent and Agreement

By accessing the Platform, registering an account, or purchasing any subscription passes, you explicitly consent to the collection, storage, and processing of your personal data as outlined in this policy. You have the right to withdraw your consent at any time, subject to legal or contractual restrictions. However, withdrawing consent may limit our ability to provide services to you.

2. Information We Collect

To provide a seamless, localized salon booking experience, we collect various categories of personal data (collectively, "Personal Information"):

A. Personal Data Provided Directly by You

• Account Credentials: Your phone number is our primary account identifier, used to verify your identity via secure One-Time Password (OTP) validation.
• Profile Details: Your first name, last name, and optional details such as email address and profile picture.
• Payment Information: Transaction tokens, billing address, and transaction statuses. Rizarv does not store raw credit card numbers or net banking credentials; all payments are securely processed by our RBI-licensed payment gateway partners (such as Razorpay).

B. Information Collected Automatically

• Precise Location Data: With your prior permission, we access your device’s GPS coordinates to display and match you with nearby partner salons, calculate distances, and recommend local stylists. You can choose to enable or disable location access via your device settings.
• Device and Usage Information: IP address, device type, operating system version, browser settings, application logs, crash reports, and interaction history on the Platform.
• Cookies & Tracking: We use cookies, web beacons, and similar tracking technologies to retain your session, remember preferences, and analyze traffic patterns.

C. Service Provider Data (For Salon Partners)

If you register as a Service Provider (Partner), we collect additional business verification details, including business name, legal owner name, business address, bank account details for payouts, PAN (Permanent Account Number), GSTIN (where applicable), and KYC documents.

3. Purposes of Processing Your Data

We process your Personal Information for the following legitimate purposes:

• Core Service Delivery: To authenticate your account, maintain your profile, process booking reservations, issue digital wallet balances, and track loyalty point accruals.
• Communication: To send you transactional SMS alerts, booking confirmations, invoice statements, support responses, and push notifications.
• Location Matching: To display beauty studios within your immediate vicinity and optimize route calculations.
• Payment and Payout Processing: To complete transactions and disburse earnings to our partner salons.
• Security and Fraud Prevention: To detect, investigate, and prevent malicious activities, unauthorized access, or terms-of-service violations.

4. Sharing and Disclosure of Information

We value your privacy and do not sell, rent, or trade your Personal Information. Your details are shared only in the following limited circumstances:

• With Service Providers (Salons/Stylists): When you book a slot, we share your name and contact phone number with the respective partner salon to facilitate your appointment and notify them of any special requests.
• With Third-Party Infrastructure Services: We share data with verified technical partners who assist in hosting the Platform (AWS S3), sending messages (SMS gateways), verifying payments (Razorpay), and sending notifications. These processors are contractually bound to process data only on our instructions.
• For Legal Enforcement: If required by law, court order, or governmental authorities to comply with legal processes, protect the rights and property of Rizarv, or prevent imminent harm.

5. Data Storage, Security, and Localization

All personal data collected is stored and processed securely on virtual private servers located within the territory of India (AWS Mumbai Region). We implement industry-standard administrative, technical, and physical security measures—including SSL encryption, secure API tokens, and access control lists—to protect your data from unauthorized access, alteration, disclosure, or destruction.

6. Your Rights as a Data Principal

Under Indian data protection laws, including the DPDP Act, 2023, you possess the following rights regarding your personal data:

• Right to Access & Information: The right to obtain a summary of your personal data being processed and a list of third parties with whom it has been shared.
• Right to Correction and Completion: The right to correct, update, or complete any inaccurate or incomplete Personal Information stored with us.
• Right to Erasure (Account Deletion): The right to demand the permanent deletion of your account and associated personal data. You can exercise this right at any time via the "Request Account Deletion" button in your Profile screen, or by accessing the deletion portal at rizarv.com/account-deletion.
• Right to Grievance Redressal: The right to register a complaint regarding any data processing activity. Our support team will resolve your complaint in a timely manner. You can reach out directly to us at support@rizarv.com.

7. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our operational practices or legal obligations. We will notify you of any material changes by posting the revised policy on this page with a new "Last Updated" date. We recommend checking this page periodically to stay informed about how we protect your information.