Privacy Policy

We collect only the information needed to handle spa enquiries and calls:

• Lead-ad form details from Facebook/Instagram Lead Ads and Google Ads lead forms — such as your name, phone number, email address, and the answers you provide in the form.
• Website form leads — details you submit through enquiry or contact forms.
• WhatsApp enquiries — the phone number and message details when you contact a spa via WhatsApp.
• Call logs from spa business phones running the Dialo app — the caller's phone number, call time, call duration, and call type (incoming, outgoing, or missed). We do not record calls and do not collect call audio or the contents of any conversation.

• To contact enquiries and follow up about spa bookings and services.
• To track which source or campaign a lead came from.
• To measure advertising performance and improve marketing.

We process this data on the basis of your consent and for the legitimate purpose of responding to the enquiry you initiated. We do not use it for any unrelated purpose.

We share personal data only with service providers who help us operate Dialo, and only to the extent needed:

• Supabase — secure database hosting for leads and call logs.
• Vercel — application hosting and delivery.
• Meta and Google — as the platforms that originate lead-ad enquiries.
• The specific spa or business you contacted, so it can respond to you.

We do not sell your personal data to anyone. We may disclose data if required by law or a valid order from a competent authority.

Data is stored on secured, access-controlled infrastructure and transmitted over encrypted connections. We apply reasonable technical and organisational safeguards as required under the IT Act, 2000 and the DPDP Act, 2023.

We retain lead and call data for up to 24 months from collection, after which it is deleted or anonymised — unless you request earlier deletion, or we are required to keep it longer to meet a legal obligation.

As a Data Principal, you have the right to:

• Access a summary of the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion (erasure) of your personal data.
• Withdraw your consent at any time (this does not affect processing already done).
• Nominate another person to exercise your rights in case of death or incapacity.
• Raise a grievance and have it addressed.

To exercise any of these rights, contact our Grievance Officer, Aniket Singh, at aniketsingh.meta@gmail.com. We will acknowledge and respond to your request within 30 days. To delete your data, you can also follow the steps on our Data Deletion page.

Dialo uses only essential login session cookies that keep authorised users signed in to the admin dashboard. We do not use advertising or third-party tracking cookies on this application.

Dialo is a business tool and is not intended for anyone under 18 years of age. We do not knowingly collect personal data from children. If you believe a child's data has been shared with us, please contact us and we will delete it.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page. Please review it periodically.

For any privacy question or to reach the Grievance Officer, email Aniket Singh at aniketsingh.meta@gmail.com. Full business details are listed below.