Privacy Policy
1. About this policy
This policy explains how we collect, use, and protect personal data when you use glowapp.id and the GlowApp services — a profile page, booking, and WhatsApp-based AI receptionist platform for salons and beauty businesses. We comply with Indonesia's Personal Data Protection Law (Law No. 27 of 2022, "UU PDP").
2. Data we collect
- Salon owners (registered users): name, email address, phone/WhatsApp number, business information (salon name, address, services, staff, opening hours), and login data.
- Salon customers: name, WhatsApp number, the content of conversations with the AI assistant, and booking details (service, preferred staff, date/time) provided when booking or making an enquiry.
- Technical data: IP address, device/browser type, and usage logs for security and service improvement.
3. How we use data
- Providing the service: displaying salon profile pages, processing bookings, and answering customer enquiries via the AI assistant.
- Passing customer booking details and enquiries to the relevant salon.
- Sending service notifications (e.g. appointment confirmations and reminders).
- Maintaining security, preventing abuse, and improving the service.
We do not sell personal data to anyone.
4. WhatsApp and Meta
GlowApp's messaging features run on Meta's WhatsApp Business Platform (Cloud API). Messages you send to a GlowApp WhatsApp number are processed by Meta under its own privacy policy and then forwarded to our systems to be answered. Conversations are stored in our systems so the salon can see its customers' enquiry and booking history.
5. Sharing with processors
We use trusted infrastructure providers to run the service: Meta (WhatsApp Business Platform), DigitalOcean (servers and databases, Singapore region), and Mailgun (transactional email). They process data only on our instructions.
6. Storage and security
Data is stored in DigitalOcean's Singapore-region data centres with encryption in transit (HTTPS/TLS) and restricted access. Passwords are stored hashed. We apply reasonable technical and organisational measures to protect your data.
7. Retention
Data is kept while a salon account is active or as needed for the purposes above. When an account is closed, personal data is deleted or anonymised within a reasonable period, unless longer retention is required by law.
8. Your rights (UU PDP)
Under UU PDP you may request access to, a copy of, correction of, deletion of, or restriction of the processing of your personal data, and you may withdraw consent. Full data-deletion instructions are on our Data Deletion page. Submit other requests via the contact below; we will respond as required by regulation.
9. Cookies
We use cookies necessary for core functionality (e.g. login sessions). We do not use third-party advertising cookies.
10. Changes
This policy may be updated from time to time. The latest version is always available on this page together with its effective date.
11. Contact
CV San Siro Media (GlowApp) — Denpasar, Bali, Indonesia.
Email: info@glowapp.id