Legal

Privacy Policy

How HerDay, a product of Excelsior The Company, collects, uses and protects your personal data.

Last updated: 9 October 2026

Summary: We collect what we need to run bookings between clients and makeup artists, process payments, verify identities, keep everyone safe and send you updates. We never sell your data. You can switch off WhatsApp offers or all WhatsApp messages at any time in the app (My Account) or by replying STOP. Questions: herday@excelsiorstech.com.

1. Who We Are

HerDay is a product of Excelsior The Company ("Excelsior", "we", "us", "our"), a company incorporated in India. Excelsior is the data fiduciary responsible for the personal data described in this policy under the Digital Personal Data Protection Act, 2023 and other applicable Indian law.

2. What We Collect

Account details: name, mobile number, email address, date of birth, password (stored only in encrypted, hashed form) and your preferred language.
Booking details: the services you book or offer, dates, occasions, addresses, and messages exchanged about a booking.
Location: addresses you enter and, during an active booking, the artist's live location so the client can see arrival progress.
Photos & media: profile photos, portfolio images, reference looks, and arrival/before/after photos taken during a booking.
Artist verification: identity verification details (for example through DigiLocker), a verification selfie, and payout bank or UPI details.
Payments: payment status and transaction references. Card and bank credentials are handled by our payment partner; we do not store your full card number.
Support: messages you send to our help desk, in the app or on WhatsApp.
Device & technical data: app notification tokens, device type, app version, and logs needed to keep the service secure and working.
Consent records: what you agreed to (for example WhatsApp updates or offers), when, and the wording you saw.

3. How We Use It

To create and manage your account and let you sign in.
To match clients with artists, run bookings, and show booking progress.
To take payments, hold them until a booking is complete, process refunds, and pay artists.
To verify artists' identities and prevent fraud, abuse and unsafe behaviour.
To send you service messages about your bookings, payments and account.
To send you offers and updates where you have agreed to receive them.
To provide AI features you choose to use, such as makeup previews, and to answer support questions.
To meet legal, tax and regulatory obligations and to resolve disputes.

We use booking and payment data because it is needed to provide the service you asked for. We use promotional messaging only with your consent, which you can withdraw at any time.

4. Messages: WhatsApp, SMS, Email & App

We may contact you by app notification, WhatsApp, SMS and email. On WhatsApp we send two kinds of messages:

Booking updates such as confirmations, "artist on the way", refunds and payouts. These are on by default so you do not miss important information about a service you booked or provide.
Offers about HerDay services, sent no more than a few times a week and only between 10 am and 8 pm.

You can turn either off at any time in the app under My Account → WhatsApp. Reply STOP on WhatsApp to stop offers, or STOP ALL to stop all WhatsApp messages. App notifications and essential SMS (such as login codes) are not affected. Replies you send us on WhatsApp are handled by our support team.

5. Who We Share It With

We do not sell your personal data. We share it only as needed to run HerDay:

Between clients and artists for a booking — for example the client's name and venue with the booked artist, and the artist's name, profile and arrival progress with the client.
Service providers who process data on our behalf: Amazon Web Services (hosting and storage), Razorpay (payments), Surepass and DigiLocker (identity verification), Meta (WhatsApp messaging), Google (sign-in and maps), Expo (app notifications), SMS and email delivery providers (such as My Dreams Technology, MSG91 and Brevo), Agora (video calls), and AI providers used for optional features (such as Google Gemini and Replicate for makeup previews, and Amazon Bedrock for our help-desk assistant).
Meta, to measure our ads — if you join HerDay as an artist after agreeing to it on the sign-up form, we tell Meta (Facebook and Instagram) that a sign-up happened, with a coded (hashed) form of your phone number, email, name and city, plus the ad-click details your browser sent us (IP address and browser type), so Meta can tell us which of our ads worked. We do not run any Meta tracking script on our website, and Meta cannot read your number back from the code.
Authorities where required by law, court order, or to protect the safety of our users.

6. Where It Is Stored

Our main systems run on Amazon Web Services in India (Mumbai). Some service providers listed above may process data outside India, in line with applicable law.

7. How Long We Keep It

Account and booking data: while your account is active, and afterwards for as long as needed for legal, tax, accounting or dispute purposes.
WhatsApp message logs (delivery status and your replies): up to 12 months.
Consent records: for as long as we rely on that consent, so that we can show what you agreed to.
Data we no longer need is deleted or anonymised.

8. Your Rights & Choices

Subject to applicable law, you can:

ask what personal data we hold about you and how we use it;
correct or update your data (much of it directly in the app);
ask us to erase your data, where we are not required to keep it;
withdraw consent at any time — for example to WhatsApp offers — as easily as you gave it;
nominate another person to exercise these rights on your behalf; and
raise a grievance with us and, if unresolved, with the Data Protection Board of India.

To use these rights, write to herday@excelsiorstech.com. We will respond within the time required by law.

9. Security

We use encryption in transit, encrypted storage for credentials, restricted access, private networks for our databases, and monitoring to protect your data. No system is perfectly secure; if a breach affects you, we will notify you and the authorities as required by law.

10. Children

HerDay is intended for adults. If a booking is made for a minor, it must be made by a parent or guardian. We do not knowingly collect data from children without verifiable parental consent.

11. Changes to This Policy

We may update this policy from time to time. We will tell you about material changes in the app or by email, and the date at the top will change.

12. Grievances & Contact

Grievance / privacy contact: herday@excelsiorstech.com
Company: Excelsior The Company, Chennai, Tamil Nadu, India
Website: excelsiorthecompany.com