Privacy Policy

This Privacy Policy explains how Infolifehub ("AestheticFlow", "we", "us", "our") collects, uses, stores and protects information through the AestheticFlow platform ("Service"). By using AestheticFlow, you agree to the practices described in this policy.

1. Who We Are

AestheticFlow is a cloud-based business management platform for salons, aesthetic clinics and wellness businesses — covering appointments, POS, staff management, client portal, product orders and branded website publishing.

2. Information We Collect

2.1 Account Information (from our clients)

• Business name, owner name and contact person details
• Email address and phone number
• Billing information and payment records
• Login credentials (passwords stored as hashed values, never plaintext)

2.2 Business Operational Data (entered by our clients)

• Client profiles: name, contact number, date of birth, gender and visit history
• Appointment records: service, branch, staff, date, status and payment history
• Product orders: catalog items, delivery details, courier and tracking information
• Staff records: roles, branch assignments, attendance and leave history
• Payment records: session fees, receipts and reward claim activity
• Website content: service descriptions, images, deals and SEO metadata

2.3 Technical Data

• IP addresses used to access the dashboard or client portal
• Browser type, device information and session logs
• Activity logs per appointment and product request update
• Error logs for troubleshooting and platform stability

3. How We Use Information

• Service delivery — To operate appointments, POS, staff management, portals and website features on your behalf.
• Billing — To manage subscription payments and generate invoices.
• Activity tracking — To provide audit logs of who changed appointment status, payments, branch and dispatch details.
• Platform operations — To maintain security, prevent abuse and ensure uptime.
• Support — To respond to client inquiries and resolve issues.

4. Data Isolation

Each business account on AestheticFlow operates in a completely isolated workspace:

• Businesses can only access their own clients, appointments, staff, payments and website data.
• No cross-account data access is possible at any level of the platform.
• Branch-level access is enforced so staff can only see data from their assigned branch.
• Role-based permissions determine what each user type (owner, manager, reception, staff) can view or modify.

5. Data Sharing

We do not sell, rent or share your data with third parties except:

• Service providers — Hosting and infrastructure providers who are contractually bound to protect your data and process it only on our instructions.
• Legal requirements — If required by law, court order or government regulation in Pakistan.
• Business transfer — In the event of a merger or acquisition, with appropriate notice to affected users.

6. Data Storage and Security

• All data is stored on servers with encrypted storage.
• All connections use TLS encryption in transit.
• Passwords and credentials are hashed and never stored in plaintext.
• Access to production systems is restricted to authorized personnel only.
• Activity logs track all changes to appointments, payments and product requests for audit purposes.
• Regular security reviews and access audits are conducted.

7. Data Retention

• Operational data (appointments, payments, client records) — Retained for the duration of the active subscription.
• Account data — Retained for the subscription period plus 12 months after account closure.
• Activity and error logs — Retained for 30 days for troubleshooting.
• Billing records — Retained for 7 years as required by Pakistan tax regulations.
• Upon account termination, data is available for export for 30 days before deletion.

8. Your Rights

You have the following rights regarding your data:

To exercise any of these rights, email [email protected]. We will respond within 15 business days.

9. Data Deletion

To request complete deletion of your account and data:

1. Email [email protected] with the subject line "Data Deletion Request".
2. Include your business name and the registered email address on the account.
3. We will confirm receipt within 2 business days.
4. Deletion will be completed within 30 days of confirmation.
5. We will retain only what is legally required (billing records per tax law).
6. You will receive a confirmation email once deletion is complete.

10. Client Data Responsibility

AestheticFlow stores client profiles, appointment history and contact information on behalf of your business. If you are a client of a salon or clinic using AestheticFlow:

• The business that collected your information is responsible for having your consent.
• To access, correct or delete your personal data, contact the business directly.
• If you cannot reach the business, contact us at [email protected] and we will assist.

11. Cookies

The AestheticFlow dashboard and client portal use essential cookies for session management and authentication only. We do not use tracking cookies, advertising cookies or third-party analytics scripts on the platform. You can control cookies through your browser settings, though disabling essential cookies will affect login functionality.

12. Changes to This Policy

We may update this policy from time to time. Changes will be reflected on this page with an updated "Last updated" date. For material changes, we will notify active subscribers via email at least 14 days before the changes take effect.

13. Contact

For any privacy-related questions, requests or concerns: