Privacy Policy

---

1. Information We Collect

A. Customer Data (Early Access Users)

When you join the Trimzy Early Access or Waitlist, we collect the following:

• Full Name
• Phone Number
• Email Address
• City
• Consent checkbox: "I agree to receive updates from Trimzy"

B. Salon Partner Data

When a salon applies for our Partner Program, we collect:

• Salon Name
• Owner Name
• Phone Number
• Email Address
• Full Address
• Number of Chairs (optional)
• Services Offered (optional)
• Consent checkbox: "I agree to be contacted by Trimzy"

C. Automatically Collected Data (Supabase)

When you submit any form, our backend (Supabase) automatically stores:

• Timestamp of submission
• IP address used during submission (for spam detection, rate limiting, and security)

We do not use IP addresses for marketing or profiling. They are collected solely for system protection and abuse prevention.

Analytics & Website Usage Tracking

We collect anonymous usage data to understand how visitors interact with our website and improve our services. This includes:

• Browser Information: Browser type, version, and operating system
• Device Information: Screen resolution, timezone, and language settings
• Usage Data: Pages visited, forms viewed, and actions taken on our website
• Session Identifier: A unique browser fingerprint (generated from your browser settings) to track your journey on our website without using cookies

Important: This data is pseudonymous and cannot directly identify you as an individual. We do not track you across other websites.

Purpose of Analytics Data:

• Understand which features are most popular
• Improve website performance and user experience
• Measure conversion rates (how many visitors sign up)
• Identify and fix technical issues

Data Retention:

Analytics data is retained for 90 days and then automatically deleted. You can request immediate deletion of your analytics data by contacting us at hemantexcusemebrother@gmail.com.

Legal Basis (GDPR):

We process this data based on our legitimate interest (Article 6(1)(f) GDPR) to improve our services and understand user behavior.

---

2. How We Use Your Information

We use the collected information for the following purposes:

• To contact early users about Trimzy product updates, rollout plans, beta access and offers.
• To process and evaluate salon partnership applications.
• To verify submissions and prevent fake or abusive entries.
• To improve safety, reliability, and stability of the platform.
• To comply with legal and administrative requirements.

---

3. Legal Basis for Processing

We process data under the following lawful bases:

• Consent — when you tick the agreement checkbox before submitting forms.
• Legitimate Interest — to protect the platform from misuse, spam, and fraud.

---

4. Data Retention

We keep your data only for as long as necessary:

• Customer waitlist data: up to 24 months unless deleted earlier.
• Salon partner applications: retained until onboarding decision or for compliance purposes.
• IP addresses: retained for security logging and fraud prevention.

You may request deletion at any time (see Section 7).

---

5. Data Sharing

We do not sell, rent, or trade your personal information.

We may share limited data only with:

• Service providers such as Supabase (our backend database and security layer)
• Legal authorities, if required by law

All service providers operate under data protection agreements.

---

6. Security Measures

We take reasonable measures to protect data:

• Encrypted database storage
• Access controls and role-based restrictions
• Activity logs and spam prevention systems
• IP-based threat detection
• Content Security Policy (CSP) headers

However, no system is 100% secure, and we encourage responsible use of your personal data.

---

7. Your Rights

You have the following rights regarding your personal data:

• Right to Access – Request a copy of your data.
• Right to Correction – Ask us to update or fix incorrect data.
• Right to Deletion ("Right to Be Forgotten") – Ask for permanent deletion of all your data.
• Right to Withdraw Consent – Stop receiving updates at any time.

To request deletion or access to your data, contact us at:

Email: hemantexcusemebrother@gmail.com

---

8. Children's Privacy

Trimzy is not intended for users under 16 years of age. We do not knowingly collect data from minors.

---

9. International Users

Your data may be stored on servers located outside your country (e.g., Supabase servers). We ensure adequate data protection measures for such transfers.

---

10. Updates to This Policy

We may update this Privacy Policy as our product grows or legal requirements evolve. When updated, the "Last Updated" date will change.