Privacy Policy

The salon (business customer) is the data controller for its clients’ data stored in YUMA. YUMA acts as a processor for that client data and as a controller for account, billing, and platform security data needed to run the service.

Account data: name, email, authentication identifiers (Google, Telegram, or email/password), organization and salon settings.

Salon operations: staff, services, appointments, visit history, notes, and analytics derived from bookings.

Client records (entered by the salon or via public booking): name, phone number in E.164 format, optional email, visit history, appointment sources, and messaging preferences.

Social contacts when provided: Instagram handle or Telegram identifiers used for reminders and inbox features.

If a salon connects Instagram Messaging in Integrations, we receive data from Meta only through official APIs after the salon owner authorizes the connection. This may include Instagram direct messages, sender profile name, Instagram-scoped user ID (IGSID), and profile picture URL.

We do not scrape Instagram, log into Instagram on behalf of users with their passwords, or collect data outside what Meta sends to our webhook after a valid connection.

Disconnecting Instagram in the dashboard stops new message delivery; see our Data Deletion page for removal of stored messaging data.

Telegram and Instagram messages are processed to show conversation history in the salon inbox and to send appointment reminders or replies initiated by the salon. Message content and metadata are stored in your organization’s tenant and are not sold to third parties.

Paid plans are billed through Paddle (Merchant of Record). We receive subscription status, plan identifiers, and limited billing contact details from Paddle; card data is handled by Paddle, not stored on YUMA servers.

YUMA runs on Cloudflare Workers and related EU-oriented infrastructure. Data is isolated per salon (multi-tenant). We use encryption in transit (HTTPS) and access controls for production systems. Logs are kept for a limited time for security and debugging.

We keep data while the salon account is active and as needed to provide the service, comply with law, and resolve disputes. Messaging history may be subject to salon-configured retention limits where available. After account deletion, we delete or anonymize organization data within a reasonable period, except where retention is required by law or legitimate backups (then deleted on schedule).

Salon owners can export or delete organization data via the dashboard or by contacting us. End clients of a salon should contact the salon first; the salon can update or remove client records in CRM. EU/EEA data subjects may have rights of access, rectification, erasure, restriction, and portability where applicable — contact us or your salon as controller.

For Meta-related deletion requests initiated from Facebook/Instagram settings, we also provide a data deletion callback (see Data Deletion page).