Legal

Privacy policy

Last updated 20 October 2026

Aminao ("Aminao", "we", "us") makes salon software for appointments, billing, memberships, reports and WhatsApp messaging. It runs at aminao.net and app.aminao.net. This policy explains what personal data we collect, why, who we share it with, how long we keep it, and how you can see, correct or delete it.

1. Who is responsible for your data

The Aminao app and website are provided by Aminao, Pune, Maharashtra, India. Aminao is the data fiduciary (data controller) for the data described in this policy, except where a salon is responsible as explained below.

• Salon owners and their staff (our customers): we decide how your account data is used, so we are responsible for it.
• A salon's own clients (people who book or are billed at a salon that uses Aminao): the salon decides what it records about you and why. We store and process that data on the salon's behalf and only on its instructions. For questions about your data, contact the salon first; we will help the salon answer you, and you can also write to us directly.

2. What we collect

From salon owners and staff

• Name, phone number, email address and sign-in details.
• Salon details: business name, address, GST number, opening hours, services, prices and staff.
• Plan and payment records for your Aminao subscription.
• Records of who created or changed bills, appointments and other records, kept so a salon can see its own history.

From a salon's clients, entered by the salon or sent by you

• Name, phone number and, if the salon records them, email, birthday, gender and notes.
• Appointments, services, bills, payments, memberships and packages.
• WhatsApp messages you send to the salon's number, and the replies sent to you.

From visitors to aminao.net

• If you ask for a demo, the details you type in the form, sent to us by WhatsApp or email.
• Basic technical data our servers record, such as IP address, browser and error reports, used to keep the site running and secure.

We do not use advertising or tracking cookies on aminao.net. The Aminao app stores your sign-in in your browser so you stay signed in.

3. WhatsApp and Facebook data

Salons can send and receive WhatsApp messages through Aminao, either from Aminao's shared number or from their own number. A salon connects its own number by signing in with Facebook in Aminao ("embedded signup"), which uses Meta's WhatsApp Business Platform.

When a salon connects its own number, we receive from Meta, with the salon's permission:

• The IDs of its WhatsApp Business account, phone number and Meta business portfolio.
• The phone number and its display name.
• An access token that lets Aminao send messages, manage message templates and receive messages and calls for that WhatsApp Business account only.

We use this only to send and receive the salon's WhatsApp messages and calls (booking confirmations, reminders, bills, replies in Chats), to keep its message templates up to date and to show delivery status. We do not read or use the salon's Facebook profile, friends, pages or ads, we do not use WhatsApp data for advertising, and we do not sell it. When a salon disconnects its number, we stop using the token and delete it.

We never receive your Facebook password. Messages sent through WhatsApp are also handled by Meta under WhatsApp's Business Terms and WhatsApp's privacy policy.

How we handle Meta Platform Data

Aminao asks Meta only for the permissions it needs, and only after the salon agrees in the Facebook window:

• whatsapp_business_management: to read the salon's WhatsApp Business account and phone number, and to create and check its message templates.
• whatsapp_business_messaging: to send and receive the salon's WhatsApp messages and calls, and to receive delivery updates.
• business_management: to link the salon's WhatsApp Business account to Aminao during signup.

We follow Meta's Platform Terms and Developer Policies. We use data received from Meta only to provide Aminao to the salon that connected it. We do not sell, license or rent it; we do not use it for advertising, to build profiles of people, or to decide anyone's eligibility for credit, jobs, housing or insurance; and we do not share it except with the service providers listed in section 5, who may use it only to provide their service to us. We delete it when the salon disconnects, closes its account, asks us to, or when we no longer need it, and on request from Meta.

4. How we use data

• To run the service: bookings, bills, reminders, reports, memberships and messages.
• To send WhatsApp messages the salon has set up, such as booking confirmations, reminders and bills. Clients can stop marketing messages at any time by replying STOP.
• To draft replies and summaries with AI, when a salon turns those features on. The text is sent to an AI service provider to produce the reply and is not used to train their models.
• To provide support, fix problems, prevent fraud and abuse, and keep the service secure.
• To send account and billing notices to salon owners.
• To meet legal, tax and accounting obligations.

We do not sell personal data and we do not use a salon's client data to market to those clients ourselves.

We process personal data with the consent of the person it is about, to perform our contract with the salon, and where the law requires or permits it. Salons are responsible for having their clients' consent to receive WhatsApp messages from them.

5. Who we share data with

Only with the service providers we need to run Aminao, under contracts that protect the data:

• Microsoft Azure, which hosts our servers and database in India.
• Meta Platforms (WhatsApp Business Platform), to deliver WhatsApp messages and calls.
• AI service providers, for AI features a salon turns on.
• Payment providers, to process subscription payments.

We may also share data when the law requires it, to protect people's safety or our rights, or as part of a sale or merger of our business, in which case this policy continues to apply.

Our main servers are in India. Some providers, such as Meta and AI service providers, may process data in other countries. When that happens, we rely on their contractual and security commitments to protect it, as Indian law allows.

6. How long we keep data

• Salon account and business records: while the salon uses Aminao, and up to 90 days after the account is closed, unless the law requires us to keep them longer (for example, bills kept for tax purposes).
• The text of WhatsApp messages from clients: 30 days.
• Message delivery records: 90 days, or up to a year while a delivery is still unresolved.
• Backups: overwritten on a rolling basis within 30 days.

7. Security

Data is encrypted in transit (HTTPS) and at rest. Each salon's data is kept separate from every other salon's. Access is limited by role, sign-ins are protected, and access tokens and secrets are kept out of the app's code. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.

8. Your rights

Under India's Digital Personal Data Protection Act, 2023 and other laws that apply to you, you can ask to:

• see the personal data we hold about you;
• correct or update it;
• have it deleted;
• withdraw consent you gave, such as for marketing messages;
• name someone to act for you;
• complain to us, and then to the Data Protection Board of India.

Write to us at the address below. We reply within 30 days.

9. Deleting your data

You can ask us to delete your data at any time. You do not need to give a reason.

Delete all your Aminao data

1. Email admin@aminao.net with the subject "Delete my Aminao data".
2. Include your name, your salon's name (or, if you are a salon's client, the salon's name and your phone number), and the email or phone number linked to your data.
3. We confirm the request, check that it comes from you, and delete your data within 30 days. We email you when it is done.

Remove only the WhatsApp and Facebook connection

1. In Aminao, open Messaging → Messaging settings and disconnect your WhatsApp number. We immediately stop using and delete the access token Meta gave us, and the IDs we received with it.
2. You can also remove Aminao in Facebook: open Settings & privacy → Settings → Business Integrations (or Meta Business Suite → Settings → Integrations), select Aminao and choose Remove. When Meta tells us you removed Aminao, we delete the data we received from Meta about you.

If you are a salon's client, you can also ask the salon to delete your details. We keep only records the law requires (such as tax invoices), only for as long as required and only for that purpose.

10. Children

Aminao is for businesses and is not meant for children. Salons are responsible for having consent from a parent or guardian before recording a child's details.

11. Changes to this policy

If we make important changes, we will update the date at the top and tell salon owners in the app or by email before the change takes effect.

12. Contact

For any question about this policy or your data, or to use your rights:

Aminao
Pune, Maharashtra, India
Email: admin@aminao.net

Grievance Officer: under India's Information Technology Act, 2000 and Digital Personal Data Protection Act, 2023, complaints about your personal data can be sent to our Grievance Officer at admin@aminao.net. We acknowledge complaints within 24 hours and resolve them within 30 days.