Privacy Policy

Effective 1 October 2026

Who operates Glowhil

Glowhil is operated by Xellara Digital Solutions OPC Private Limited. Privacy questions and deletion requests can be sent to contact@xellara.com.

Information we collect

We receive your name, email address and profile photo when you sign in with Google. Depending on the features you use, we may also store your phone number, language, saved addresses, pincode, foreground device location, bookings, queue activity, wallet transactions and UPI reference numbers. Salon owners may provide business details, photographs, operating hours and verification documents.

How information is used

We use this information to authenticate you, show nearby salons, manage bookings and queues, operate wallet and payment-verification features, support salon administration, prevent misuse and provide customer support. Glowhil does not sell personal information or use it for advertising.

Location

Location is requested only while you are using the app and only when you choose a location feature. It is used to find and save nearby salon areas. Glowhil does not request background location access.

Service providers and security

Glowhil uses Google Sign-In and Firebase Authentication, Firestore and Storage to provide the service. Google Maps may open externally when you ask for directions. Data is sent over encrypted connections. Access controls limit full booking and account records to the customer, relevant salon owner and authorised administrators.

Retention and deletion

You can request account deletion inside Glowhil from Profile > Delete account, or follow the web deletion instructions. We process requests within 30 days. Profile data and uploaded files are deleted or anonymised, except records that must be retained for legal, accounting, fraud-prevention or dispute-resolution purposes. Retained records are restricted and removed when their retention period ends.

Your choices

You may deny location or photo access and continue using features that do not need them. You can update profile information, clear saved location data, sign out, or request account deletion at any time.

Contact

Xellara Digital Solutions OPC Private Limited
Ward No. 6, House No. 200, Rajkhar, Duddhi, Sonbhadra, Uttar Pradesh 231208, India
Email: contact@xellara.com

This section applies specifically to the Xellara Portal Android application, package name com.xellara.portal, previously published as Xellara (com.xellara.org). Xellara Portal is a business-to-business client portal; accounts are created for people who work at, or with, our client companies.

What the App Collects

• Name, email address and phone number — to create and identify your account, and to show you to colleagues on shared issues. Provided by you at sign-up, or by your Google account if you use Google Sign-In.
• Company and role (admin, client or developer) — set by your company administrator, and used to decide what you can see in the app.
• Support issues you raise and messages you send — to deliver the support and issue-tracking service.
• Invoices and billing records for your company — to bill for services and to meet Indian tax and accounting obligations.
• App usage events and crash diagnostics (device model, OS version, stack traces) — collected automatically by Google Firebase Analytics and Crashlytics to find and fix faults.

The app does not access your contacts, photos, location, microphone or camera, and does not read anything outside the app.

Who Processes It

We do not sell personal data and do not share it for advertising. Data is processed on our behalf by Google Firebase (Authentication, Cloud Firestore, Cloud Functions, Analytics and Crashlytics) and stored on Google Cloud infrastructure. Within the app, your name, email and the issues you raise are visible to Xellara administrators and to colleagues in your own company; they are not visible to other companies.

Webmail

If your company has webmail enabled, the mail button opens your company’s webmail in your device’s own browser. The app does not display webmail inside itself, does not see your webmail password, and has no access to your mailbox.

Deleting Your Account and Data

In the app: Profile → Delete Account.

On the web: xellara.com/delete-account, which confirms your identity by emailing you a link.

Either route deletes immediately. There is no waiting period, no administrator step, and no way to reverse it. Deleting your account permanently erases your sign-in credentials and authentication record, your profile (name, email, phone number, role), your company membership record, your notifications, and the messages you have sent in the app.

Two categories are kept with your identity removed. Support issues you raised or were assigned remain so your company keeps its support history, but they are unlinked from you and relabelled “Deleted user”. Invoices and payment records are retained because Indian tax law requires us to keep accounting records; these are records of your company rather than of you personally, and are not linked to your user account after deletion.

Retention

Account data is kept for as long as your account exists, and is erased when you delete it or when your company ends its relationship with us. Crash and analytics data is retained on Firebase’s default schedule and is not linked to your name or email. Accounting records are kept for the period Indian tax law requires.

Security

Data is transmitted over HTTPS and stored in Google Cloud. Access is restricted by role and enforced by server-side security rules. Account deletion is performed by a server function, so it cannot be partially applied by a device that goes offline.

Children

Xellara is a workplace tool and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe a child has an account, contact us and we will delete it.

Your Rights

You can access and correct your profile in the app, and delete your account as described above. For any other request about your data, including a copy of it, write to contact@xellara.com. We respond within 30 days.