MasterDay Privacy Policy
MasterDay is a booking and client-messaging app for beauty salons and barbershops. It is made by MKB LABS LLC ("MKB Labs", "we", "us"). This policy explains what personal data MasterDay handles, why, who it is shared with, how long it is kept, and how to have it deleted.
1. Who this policy covers
| Person | Who they are | Our role for their data |
|---|---|---|
| Specialist | The business that signs up for and uses MasterDay | We decide how account data is used (controller) |
| Salon client | A person who books with, or messages, a salon that uses MasterDay | We process their data on the salon's behalf and on its instructions (processor). The salon decides what it records about its clients. |
If you are a salon client and want to see, correct or delete your data, you may contact the salon directly or contact us (section 9). We will pass your request to the salon or handle it with them.
2. Data we collect
From specialists
- Account details: name, email address and/or phone number, password (stored only as a secure hash), language choice.
- Business details: salon name, services and prices, working hours, time off.
- Device data for notifications: a push-notification token and the device platform (iOS, Android or web).
- Technical logs: dates and times of sign-ins and actions, and IP address, used for security and troubleshooting.
About salon clients (entered by the salon or received through a connected messenger)
- Name and phone number.
- Messenger identifiers, so a conversation can be matched to the client (for example a WhatsApp number or Telegram ID).
- Messages exchanged between the client and the salon through connected channels, including their text and time.
- Appointment history: date, time, service, status (for example completed, cancelled, no-show) and price.
- Optional details the salon chooses to add, such as birthday or notes.
From Meta (WhatsApp)
When a salon connects its WhatsApp Business account to MasterDay, we receive, through Meta's official APIs: the account and phone number IDs, the business display name, incoming messages from that salon's clients, and delivery status of messages sent. We use this data only to show the salon its conversations, send the messages and reminders the salon asks for, and keep the connection working. We do not use Meta Platform data for advertising, and we do not sell it.
Instagram is not connected to MasterDay yet, and we receive no Instagram data. When it is connected, we will update this policy.
We do not collect payment-card data. MasterDay does not process payments between salons and their clients.
3. How we use data
| Purpose | Data used |
|---|---|
| Running the salon's calendar, client list and inbox | Business details, client details, appointments, messages |
| Sending appointment confirmations and reminders on the salon's behalf | Client name, phone or messenger ID, appointment time and service |
| Notifying the specialist about new messages and bookings | Device tokens, message and booking events |
| Security, preventing abuse, fixing problems | Account details, technical logs |
| Managing the salon's subscription | Account and business details |
| Meeting legal obligations | Only what the law requires |
We do not sell personal data, use it for advertising, or use salon clients' data for our own marketing.
4. Who we share data with
We share data only with the service providers needed to run MasterDay, and only for that purpose:
| Provider | Why |
|---|---|
| Meta Platforms (WhatsApp Business Platform) | Sending and receiving the salon's messages |
| Telegram | Sending and receiving the salon's messages, if the salon connects Telegram |
| Apple Push Notification service, Google Firebase Cloud Messaging, browser push services | Delivering notifications to the specialist's devices |
| Hosting provider: netcup GmbH (Germany) | Running our servers |
| Backblaze (B2 cloud storage) | Encrypted backups |
We may also disclose data if the law requires it, or to protect the rights and safety of our users or others. If MKB LABS LLC is merged or sold, data may move to the new owner under this same policy.
5. Where data is stored
MasterDay's servers are located in Germany, with our hosting provider netcup GmbH. MKB LABS LLC is based in the United States, and our users are mainly in Kyrgyzstan. Data may therefore be processed outside the country where you live.
6. How long we keep data
- While a salon's account is active, we keep its data so the app works.
- If a trial ends without payment, the account becomes read-only and data is kept for 90 days, then deleted.
- When a salon closes its account, we delete its data, including its clients' data, within 30 days. Backups are overwritten within 30 days after that.
- We may keep a minimal record longer if the law requires it.
7. Security
- All connections to MasterDay are encrypted (HTTPS/TLS).
- Passwords are stored only as secure hashes.
- Each salon can see only its own data.
- Webhooks from messengers are checked with each provider's signature before they are accepted.
- Backups are encrypted.
No system is perfectly secure. If a breach affects your data, we will notify affected users as the law requires.
8. Your rights and how to delete data
You can ask us to access, correct, export or delete your personal data.
- Specialists: you can request deletion of your account and all its data by emailing us (section 9).
- Salon clients: contact the salon, or email us with the salon's name and your phone number.
- Data received from Meta (WhatsApp): see our data deletion instructions.
We will confirm your request and complete it within 30 days. We may need to verify your identity first.
9. Contact
MKB LABS LLC
Email: [email protected]
10. Children
MasterDay is a business tool and is not directed at children. Specialists must be at least 18. We do not knowingly collect data from children except where a salon records a client's appointment.
11. Changes to this policy
If we change this policy, we will post the new version here with a new effective date. If the changes are significant, we will tell specialists in the app or by email before they take effect.