Privacy policy

Turnly (“we”, operated by [Legal business name], [Registered address]) provides an online queue for businesses such as salons and clinics (“businesses”). This policy explains what personal data we process, why, and your choices.

1. If you join a queue (customers)

• What we collect: the name and mobile number you enter, an optional note, the service you choose, and times (joined, called, served).
• Why: to hold your place in the queue, show your position and estimated wait, and let the business contact you about this visit.
• Who sees it: only the business you joined and its staff. Public screens (like a TV display) show token numbers only, never names or numbers.
• WhatsApp: only if you choose “Get WhatsApp updates” and send the pre-filled message to the business’s WhatsApp number, or you agree at the desk. The business then messages you about this ticket from its own WhatsApp Business number, through Meta’s WhatsApp Business Platform. Reply STOP at any time to stop them.
• How long: your name and number are erased automatically after the business’s retention period (90 days by default). Anonymous counts are kept for statistics.
• Bills: if the business gives you a bill, it keeps the bill (your name, what was done and the amount) as its business record for as long as the law requires. Your phone number is not stored on the bill. Payments go directly to the business through UPI, cash or card; Turnly never handles your money.

2. If you use Turnly for your business

• We collect your name, email, password (stored only as a secure hash), business details and staff you invite.
• For customer data in your queues, you decide why it is collected (you are the data fiduciary) and we process it on your behalf.

3. Security

Data is encrypted in transit (HTTPS). Access is limited per business and role. Links in emails expire and work once. We keep security logs without passwords or tokens.

4. Service providers

We use MongoDB Atlas (database hosting), [your API host], Cloudflare (website), an email provider, and Meta (WhatsApp messages, sent through each business’s own WhatsApp Business account). They process data only to provide their service to us or to the business.

5. Your rights

You can ask to access, correct or erase your personal data, or withdraw consent, by writing to hello@turnly.in. Customers can also ask the business directly. If you’re unhappy with our response, you may complain to the Data Protection Board of India.

6. Cookies

We use one essential, secure cookie to keep business users logged in, and your browser’s storage to remember your ticket on this device. No advertising or tracking cookies.

7. Changes

We will update this page when our practices change and show the date above.