Zespa privacy notice
This notice explains what we collect when you use zespa.in and the Zespa partner app at partner.zespa.in, why we collect it, who can see it, and how to ask us to change or delete it.
Last updated 7 October 2026.
Who we are
Zespa runs zespa.in and the Zespa partner app, where salons, spas and skin clinics manage their bookings. In this notice "we" means Zespa. Zespa is getting ready to register as a company; once it is registered, this notice will name the company and its address. For anything about your data, write to our privacy contact at hello@zespa.in.
On zespa.in
You can read zespa.in without telling us anything. The website sets no cookies and uses no analytics or advertising trackers. If you email us, we use your email only to reply.
What we collect in the partner app, and why
| What | Why |
|---|---|
| Your mobile number | To log you in with a code by SMS, to know it is your account, and to contact you about your application. |
| Your name and your position at the business | So our team knows who applied and who to speak to. |
| Business name, type, team size, address, PIN code and map link | To check your application and to show your salon's details in the app. |
| Your team: names, colours on the calendar, working hours and, if you add them, phone numbers | To run your salon's calendar. |
| Your services, prices and opening hours | To run your salon's calendar. |
| Mobile numbers of front desk staff you add | So they can log in to your salon. |
| Your first and last log-in times and how many times you have logged in | To keep your account safe and to help when you contact us. |
| Details of the clients and bookings you keep in the app: client name and mobile number, notes, services, price, payment and cancellation reason | To run your salon's calendar and client list. |
| A record of changes to your salon's set-up and bookings: what changed, the old and new details, when and by whom | So you and our team can see who changed what. |
| Our team's note on your application and who decided it | To record our decision about your application. |
| Each request for a log-in code: the number, a random ID for your browser and your network address | To stop people misusing SMS codes. These records are deleted after 2 days. |
When salons keep their clients' details and bookings in Zespa, those details belong to the salon. The salon decides what to keep, and we hold them only to run the app for that salon. Salons are responsible for telling their own clients how they use their details.
Cookies in the partner app
The partner app uses only the cookies it needs to work: one keeps you logged in (for up to 14 days), one remembers which salon you are working in (up to a year), and one is a random ID for your browser used for the code limits above (up to a year). Your browser also keeps your log-in in its own storage. The log-in page runs a check that you are a person, not a bot; that check may set its own cookies. None of these are used for advertising.
Who can see your data
- You and the owners of your salon. Front desk staff, whom the owner adds, can use the calendar and clients but cannot change settings.
- Zespa team members who need to, for example to review applications, stop misuse or help when you contact us. Changes our team makes to your salon are recorded in its change log.
- Companies that run our servers, send SMS codes and check that log-ins are real people, only to do that work.
- Government or law enforcement, only when the law requires it.
Where it is kept, and how it is protected
Your salon's data is completely secure, encrypted, private to your salon, never sold or shared. Your salon's records are stored in India. The servers that run the app are in Singapore and read those records to show you your pages. To log you in, your mobile number is also handled by the service that sends the SMS code, and this may be outside India.
How long we keep it
We keep your details while your account is in use. If you cancel an application, we mark it closed and stop using it. Code request records are deleted automatically after about 2 days. If you ask us to delete your data, we will act on your request, except for anything the law requires us to keep.
Your rights
Under India's Digital Personal Data Protection Act, 2023, you can ask us to:
- give you a summary of what we hold about you and who we have shared it with,
- correct, complete or update it,
- delete it,
- stop using it, if you no longer agree to us using it, which you can tell us at any time,
- let someone you name act for you if you cannot.
Write to hello@zespa.in from the email you use with us, or tell us the mobile number you log in with, so we can check it is you.
Complaints
If you have a complaint about how we handle your data, write to our privacy contact at hello@zespa.in with "Privacy complaint" in the subject. If you are still not happy with our answer, you can complain to the Data Protection Board of India.
How we contact you
When you submit an application, our team may call or WhatsApp you on your number about it, and later about your account. We do not send you offers unless you ask us to.
Age
The partner app is for people aged 18 and over who run or work at a salon, spa or clinic.
Changes to this notice
When we change this notice, we update the date at the top. If a change affects how we use your data, we tell you before it applies.