1. Information We Collect
To provide virtual queueing and real-time updates for customers visiting our partner barbershops, BarberBase collects the minimum necessary data to manage active customer visits. We collect:
- Phone Number: Used as your unique identity. When you check into a queue or log in to your dashboard, we verify your identity via a one-time passcode sent over WhatsApp.
- Queue & Visit History: Information about your active and past queue check-ins, including which barbershop you joined, the services you selected, your checked-in timestamp, and your queue status.
- Technical Device Data: IP address, browser type, and Server-Sent Events (SSE) log details used strictly to maintain live, real-time connection streams that display your active queue position.
2. How We Use Your Data
We use the collected information solely for operating and optimizing the queue service:
- Queue Operations: Allowing barbershops to view their list of waiting customers, update queue statuses, and select customers when it is their turn.
- Notification Delivery: Sending you queue updates and "your-turn" alerts. These messages are delivered to your phone over WhatsApp via our integrated messaging system, Bhejna.
- Secure Access: To protect your personal queue dashboard, we generate short-lived, secure 23-hour magic-link tokens. These links ensure that your session automatically expires, protecting your phone number and visit details.
3. Data Sharing & Third Parties
Your privacy is highly valued. We do not sell, rent, or trade your personal data. Your data is shared only under the following limited circumstances:
- Partner Barbershops: When you join a specific shop's queue, the staff of that shop can view your name, phone number, and selected services to administer your booking.
- WhatsApp Notification Providers: Phone numbers and status alerts are routed through the WhatsApp Business API using our Bhejna delivery framework to successfully send notifications.
4. Data Retention
We do not keep active queue data longer than necessary. Customer queue entries are maintained active during the day of the visit. Once a visit is marked completed, cancelled, or no-show, the personal details are archived and only anonymized metrics (such as average wait times or customer volume) are kept for analytical purposes.
5. Security
We implement industry-standard technical measures to safeguard your information. SvelteKit route protection and secure backend API tokens prevent unauthorized access. The 23-hour magic-link expiration policy ensures that even if a link is shared, access to personal dashboards is strictly short-lived.
6. Your Rights
You have the right to request access to the phone number and visit logs associated with your identity, or request the deletion of your historical visit information. To exercise these rights, please contact us at hello@barberbase.in.