ARSO Privacy Policy
ARSO (“we”, “us”) provides beauty booking software. This policy describes what we collect, why, how long we keep it, and your rights. It is intended to stay consistent with our App Privacy answers and in-app PrivacyInfo declarations.
1. Data we collect
- Account: email, name/display name, optional phone, user ID, timezone.
- Device / session: device ID, session metadata, push tokens (for notifications).
- Product content: bookings, CRM notes (masters), photos/portfolio media, client favorites.
- Product analytics: first-party events (anonymous / pseudonymous / operational classes). Not used for cross-app tracking.
- Diagnostics: crash and performance data via Sentry when enabled.
We do not collect payment card numbers, precise location, contacts, microphone, or camera content beyond photo library access you grant for portfolio uploads.
2. How we use data
- Provide accounts, authentication, bookings, profiles, and notifications.
- Improve the product with first-party analytics (not sold; not used for tracking across other companies’ apps or websites).
- Maintain reliability and security (including crash diagnostics).
- Honor export and deletion requests.
3. Tracking / ATT
ARSO does not track you across other companies’ apps or websites. We do not use App Tracking Transparency because we do not engage in tracking as defined by Apple.
4. Sharing
- Email provider (Resend): transactional email delivery.
- Push (APNs): device push tokens for notifications.
- Object storage / CDN: media you upload.
- Sentry: crash/performance diagnostics when configured.
We do not sell personal information.
5. Retention
- Account and profile data: until account deletion (plus backup windows).
- Sessions / push tokens: until logout, revoke, or deletion.
- Media: until you delete it or account deletion removes owned objects.
- Telemetry: per internal telemetry tiers (raw analytics roughly ~13 months).
- Guest records: anonymized after 24 months (retention job).
- Audit logs: preserved after account deletion for security/compliance.
6. Your rights — export & deletion
- Export: request a personal or business JSON export in the ARSO app (Settings → Account → Export). Secrets such as password hashes and refresh tokens are excluded. Download access expires after 7 days.
- Deletion: request account deletion in the ARSO app (Settings → Account → Delete Account), confirm with DELETE, then a 7-day grace period. After grace, we revoke sessions/tokens, remove owned media objects, hide public profiles, anonymize identity data, and may preserve audit records when required for security or compliance. You can cancel during the grace period.
For privacy questions or requests related to access, export, or deletion, email arsoifo@gmail.com. California residents and other users may use the same contact for privacy requests ARSO supports. Help Center: Account & Security.
7. App Privacy (summary)
- We collect data linked to you for app functionality, product interaction, and diagnostics.
- Tracking: No.
- Categories typically include: Email, Phone (optional), Name, User ID, Device ID, Photos, Other User Content, Product Interaction, Crash Data, Performance Data.
8. Contact
Privacy questions and requests: arsoifo@gmail.com
In-app: Settings → Legal → Privacy Policy.
Related help: Help Center · Accessibility