Privacy notice

Who is responsible

When you message a salon that uses BookingSolutions, the salon decides how your data is used, and Ampius Pte. Ltd. processes it on the salon's behalf as a data intermediary. For our own customers (the salons) and their staff logins, Ampius Pte. Ltd. is the organisation responsible.

Questions or requests: our Data Protection Officer at support@moduapp.co. You can also contact the salon directly.

What we collect

Customers of salons: your WhatsApp phone number and profile name, the messages you exchange with the salon, your bookings (service, staff member, date and time, attendance), your preferred language, and whether you agreed to receive offers (with the date and wording).

What the salon keeps about your visits: notes, an alert for its staff (such as an allergy) and tags, typed by its staff or brought over from the booking system the salon used before.

A salon that keeps its number in the WhatsApp Business app: the messages its staff send from the app and, if the salon chose, its last 6 months of chats and the contacts saved in the app (who become its customers).

Salon staff: name, email address, role, and records of actions taken in the staff app.

We do not ask for NRIC numbers, card numbers or passwords in chats. Deposits are paid on the payment provider's own page, directly to the salon; we never see card details.

Why we use it

To answer your questions about the salon, check availability, make, change and cancel bookings, send booking confirmations and reminders, and pass your chat to salon staff when needed.

To keep the service safe and working: preventing spam and abuse, fixing faults, and keeping an audit log of staff actions.

Marketing messages (for example offers or rebooking suggestions) are sent only if you agreed to receive them, and you can withdraw at any time by telling the salon or us. Reminders about your bookings contain no promotions.

The AI assistant

Replies are written by an AI assistant, which always says it is an AI. It only uses the salon's own information (services, prices, hours, policies) and the booking system; it cannot change prices or invent availability. You can ask for a person at any time.

To write replies, your messages are processed by our AI provider (Anthropic). Its terms do not allow it to train its models on this data.

Who we share it with

The salon you are dealing with, and the service providers we use to run the service: Meta (WhatsApp), Anthropic (AI replies), Supabase (database, Singapore region), Render (hosting, Singapore region), Resend (the salon owner's daily schedule email) and, if the salon takes deposits, its payment provider. We do not sell personal data.

Salon staff may choose to see their own appointments in a calendar app (such as Google or Apple Calendar). Those calendars show only the service and time, and your first name only if the salon turns that on; never your phone number or notes about your visit.

Meta, Anthropic and Resend may process data outside Singapore, including in the United States. Where they do, we rely on contractual protections that give your data a standard of protection comparable to the PDPA.

How long we keep it

Messages: 12 months. Booking and payment records: up to 5 years, for the salon's accounting. Salons can choose shorter periods. If you ask the salon to delete your data, your messages are erased within 30 days; booking records are kept without your name or number where the law requires.

Your rights

You may ask to see or correct the personal data we hold about you, and withdraw consent to marketing at any time. Contact the salon or our Data Protection Officer; we respond within 30 days.

Deleting your data

Customers of salons: ask the salon, or write to us at support@moduapp.co and we pass your request to the salon. Your name, number and messages are then erased within 30 days, our backups included; booking records are kept without your name or number where the law requires.

Salon staff: ask the owner to remove you from the team, which deletes your login, or write to us at support@moduapp.co.

Salons that connected WhatsApp through Facebook or Meta: from Meta we keep the WhatsApp account, number and business details you chose and the access Meta gave us for them (encrypted), never your Facebook profile or password. The chats on that number (and, if you chose, your last 6 months of chats and the contacts saved in your WhatsApp Business app) are kept as your customers' data, as above. You can remove our access at any time in Meta's Business Settings, where your WhatsApp account's partners and connected apps are listed, or, for a number kept in the WhatsApp Business app, in the app itself. Meta then tells us, and we stop sending and receiving messages on your number at once; what we already hold stays until you ask us to delete it (below).

To have your salon's account and its data deleted, email support@moduapp.co from the owner's email address. We confirm the request with you before deleting anything, then delete it within 30 days, after any export you ask for, unless the law requires us to keep a record.

Security

Our database and servers are in Singapore, and data is encrypted in transit and at rest. Each salon's data is separated from every other salon's by the database itself. Staff sign in individually, and every staff action is logged. If a data breach affects you, we notify the salon promptly so it can tell you and the PDPC as the law requires.