Privacy Policy ✦

Miracurl Salon Suite ("Miracurl", "we", "us") provides salon management software to businesses. This policy explains what information we collect, why we collect it, and the choices you have. It applies to our websites, web apps, booking pages and related services.

We act in two roles: as a data controller for information about salon owners and staff who sign up with us, and as a data processor for the customer records that salons store inside the platform. Salons remain responsible for the customer data they collect through Miracurl.

• Account information — name, business name, email, phone number and password (stored in hashed form) when you register.
• Business data — appointments, customer records, invoices, staff details, inventory and reports that you enter while using the platform.
• Payment information — handled by our payment partner (Razorpay). We receive transaction status and identifiers, never your full card or bank details.
• Usage & device data — log data such as IP address, browser type, pages visited and actions taken, used for security and product improvement.
• Content you generate — images, posters, videos and text produced through our AI studios, stored so you can reuse them.

• To provide, operate and improve the platform and its features;
• To process subscription payments and send billing receipts;
• To send service messages — booking confirmations, reminders, security alerts and product updates;
• To provide customer support and respond to your requests;
• To keep the platform secure, prevent fraud and enforce our Terms of Service;
• To comply with legal obligations such as tax and accounting rules.

We do not sell your personal information or your customers' information to anyone.

We use a small number of cookies and browser storage to keep you signed in, remember preferences and understand how the product is used so we can improve it. Essential cookies are required for the platform to work. You can control non-essential cookies through your browser settings; disabling essential cookies may prevent login or core features from functioning.

We share data only where necessary to run the service:

• Service providers — cloud hosting, payment processing, email delivery and AI model providers who process data on our instructions under confidentiality obligations;
• Your salon — if you are a staff member or customer of a salon using Miracurl, your data is visible to that salon as the business owner of the record;
• Legal requirements — where required by law, court order or to protect the rights and safety of our users;
• Business transfers — if Miracurl is involved in a merger or acquisition, data may transfer as part of that transaction with continued protection under this policy.

We keep account and business data for as long as your subscription is active. After account closure, data is retained for a limited grace period (typically 30 days) so you can export it, then deleted or anonymised, except where the law requires longer retention (for example invoices for tax purposes).

We protect data using industry-standard measures including encryption in transit (HTTPS/TLS), hashed passwords, role-based access controls, tenant isolation between salons, and Owner PIN protection for sensitive actions. No system is perfectly secure, so we also encourage you to use strong passwords and restrict staff access to what each role needs.

Depending on your location (including under India's DPDP Act and the EU GDPR where applicable), you may have the right to:

• Access a copy of the personal data we hold about you;
• Correct inaccurate or incomplete data;
• Request deletion of your data ("right to be forgotten");
• Export your data in a portable format;
• Object to or restrict certain processing, and withdraw consent where processing is based on consent.

To exercise any of these rights, email support@miracurl-suite.com. If you are a salon's customer, please contact the salon directly first — they control your booking records.

We may send you product news and offers about Miracurl if you have opted in. Every marketing email includes an unsubscribe link. Messages that salons send to their own customers through Miracurl (reminders, offers, review requests) are the responsibility of that salon, which must have the required consent.

Miracurl is a business tool and is not directed at children. We do not knowingly collect personal data from anyone under 18 as an account holder. If you believe a minor has created an account, contact us and we will remove it.

We may update this policy as our product and legal obligations evolve. Material changes will be announced in-app or by email before they take effect. The "Last updated" date at the top reflects the latest revision.

For any privacy question, request or complaint, contact our privacy team at support@miracurl-suite.com. Miracurl Salon Suite, Bangalore, Karnataka, India.