Privacy policy

1. Scope and responsibilities

RipeDesk is management software for salons, spas and aesthetic clinics. This policy covers our public website, enquiries and the operation of the software. When a salon or clinic enters its clients’ or employees’ information, that business decides why the information is collected and how it is used in its operations. RipeDesk processes that workspace information to provide the service for that business.

If you are a salon’s client or employee, contact that business first about its records and privacy practices. This policy does not replace the business’s own privacy notice.

2. Information we handle

• Website enquiries: the name, business name, email, contact phone, city, business type and message you submit when requesting a demo or contacting us.
• Account and workspace information: user account details, business configuration, branches, roles and access permissions.
• Operational records: information a business enters about clients, appointments, services, invoices, payment records, inventory, staff and related operations, depending on the modules it uses.
• Technical information: authentication information, application errors, security events and technical request information handled by our service infrastructure.
• Connected messaging: when WhatsApp is enabled, business account and phone-number identifiers, credentials needed for the connection, recipient information, notification content, message identifiers and delivery status information.

3. How information is used

We use information to respond to enquiries, arrange demos, configure and support workspaces, authenticate users, apply access permissions, deliver requested functionality, investigate faults and protect the service. A contact or demo request does not automatically subscribe you to marketing messages.

Workspace notifications are sent according to the business’s configuration and connected-provider requirements. Businesses are responsible for having appropriate permission to contact their clients and for the accuracy of the information they enter.

4. Hosting and service providers

RipeDesk uses Vercel for application hosting and Supabase for database and authentication services. If a business enables WhatsApp, Meta’s WhatsApp Business Platform processes information needed to send messages and report their status. These providers handle information under their own service terms and privacy policies. Data may be processed outside your country depending on the configured service regions and provider infrastructure.

We do not sell personal information. Information may be disclosed when needed to provide the service, respond to a lawful request or protect the rights and security of users and the service.

5. Cookies and browser storage

The application uses authentication cookies and browser storage where needed for account access and preferences. For example, report-column preferences may be saved in your browser. The public website added with this release does not include advertising trackers or a separate analytics integration.

6. Retention and deletion

Enquiries are retained for follow-up and related business administration. Workspace records are retained to provide the service and in line with the business’s instructions and any applicable retention obligations. Some records, logs or backup copies may remain for a limited period after a deletion request is processed; records that must be retained cannot always be removed immediately.

For deletion requests, see our data deletion instructions. Disconnecting a messaging integration stops its use in that workspace; it does not itself delete records held by Meta or other providers.

7. Your requests

You can contact us about access, correction, deletion or concerns about your information. We may need to verify your identity and authority before acting. Requests concerning a salon’s or clinic’s operational records may need to be handled with that business.

8. Security and updates

RipeDesk uses account authentication, role and branch permissions, database access controls and server-side protection for integration credentials. No online service can guarantee absolute security. Please keep account credentials private and notify us if you suspect unauthorised access.

We may update this policy as the product and processing practices change. The date above identifies this version.