Privacy Policy

Inqloop is used by two kinds of people, and our responsibility differs for each. India's Digital Personal Data Protection Act, 2023 calls these roles Data Fiduciary (who decides why and how data is used) and Data Processor (who acts on the Fiduciary's instructions); the person the data is about is the Data Principal.

• Businesses that use the workspace. We are the Data Fiduciary for their account data — who signed up, who is on the team, what they use.
• Those businesses' customers. The business is the Data Fiduciary for that data. We are its Data Processor, acting on its instructions. If you are a customer of a salon or practice that uses Inqloop, your relationship over that data is with them first; we act on what they ask.

From businesses using the workspace:

• Account details: name, email, phone, business name, role and permissions.
• Configuration: locations, opening hours, services, prices, policies, staff profiles.
• Usage and audit records: what was changed in the workspace, and by whom.
• Billing correspondence and support enquiries, including anything you send us in a demo request.

From customers of those businesses, on the business's behalf:

• Identity and contact details: name, email, phone.
• Appointments, purchases, packages, memberships, account credit and invoices.
• Messages exchanged with the business, including over WhatsApp.
• Ratings and reviews they choose to leave.
• Marketing consent per channel, and when it was given or withdrawn.
• Approximate location, only when a customer asks to see businesses near them — it is used for that search and not stored as a profile.

We do not ask for card numbers and never hold them. Card payments go directly to Stripe.

• To provide the service: taking bookings, processing payments, issuing invoices, delivering messages.
• To keep it working and secure: diagnostics, abuse prevention, audit trails.
• To meet legal obligations, including keeping financial records for the period the law requires.
• To send marketing — only where consent has been given, and only until it is withdrawn.

Only with the processors the service actually depends on, and only what each of them needs to do its job:

• Stripe — card payments. Card details go to Stripe directly and never through our systems.
• Meta (WhatsApp Business Platform) — delivering and receiving WhatsApp messages, where a business has connected it.
• Amazon Web Services — hosting, and storage of uploaded files such as service images and staff photos.
• Our email provider — delivering transactional email and email campaigns.
• Anthropic — powering the WhatsApp assistant, where a business has enabled it. Conversation content is sent to generate a reply.
• Google Maps Platform — converting business addresses to coordinates, so customers can find businesses near them.

We do not sell personal data, and we do not share it for anyone else's advertising.

Account and customer records are kept for as long as the workspace is active. When a workspace is closed, we delete or anonymise its data within a reasonable period, except where we are required to keep records longer — invoices and payment records in particular, which financial law requires be retained.

A business can delete an individual customer's record at any time from within the workspace.

Under the Digital Personal Data Protection Act, 2023 you have the right to a summary of the personal data we hold about you and how it is processed, to have it corrected, completed or updated, to have it erased, to nominate someone to exercise these rights if you die or become incapacitated, and to have a grievance addressed. Where other laws also apply to you, their rights apply in addition to these.

If you are a customer of a business that uses Inqloop, ask that business first — they control the data and can act immediately. If they need us, we will help them. If you are a business using the workspace, contact us at notification@inqloop.com.

You can withdraw consent for a purpose at any time. Withdrawing marketing consent does not stop service messages about appointments you have actually booked, which are sent to deliver what you asked for rather than to market to you.

Grievance Officer. Complaints about how your data is handled can be sent to notification@inqloop.com, and we will respond within the period the Act allows.

Covered separately, in more detail, on the security page.

If we change this policy materially, we will tell workspace owners rather than quietly amend the page.

Inqloop
Kalinganagar, Bhubaneshwar, Odisha – 751019, India
notification@inqloop.com

Governing law: the laws of India, with the courts at Bhubaneshwar, Odisha having exclusive jurisdiction.