Privacy Policy — Aryun Bookings
Last updated: 13 October 2026
Aryun Bookings is run by Aryun & Co, Balagere Road, Bangalore, Karnataka 560087. This policy explains what personal data we handle and why, in line with India's Digital Personal Data Protection Act, 2023.
1. Who decides how your data is used
- When you book an appointment, the business you book with and Aryun both use your details: the business to serve you, Aryun to run the booking and payment.
- When you are an artist or business using Aryun, Aryun handles your account details.
2. What we collect
If you book an appointment
| Data | Why |
|---|---|
| Name | So the artist knows who is coming |
| Mobile number | To confirm, remind and reach you about your booking |
| Address — only if you give one, for a home visit | So the artist can come to you |
| A note, if you write one | Passed to the artist |
| Booking details: service, time, amounts, status | To run the booking and any refund |
| Payment reference from Razorpay | To match your payment and refund it if needed |
We do not receive or store your card number, UPI PIN or bank details; Razorpay handles those. We do not ask for an email address, a password or an account.
Automatically
- A scrambled (hashed) form of your IP address when you start a payment, kept for a short time to stop one person blocking many slots. We cannot turn it back into your IP address.
- Anonymous page-step counts (for example, "a service was chosen"), tied to a random ID that lasts only while the tab is open. No cookies are used for this, and it is not linked to your name or number.
If you are an artist or business
Your name, email, phone and WhatsApp number, business details, services, prices and hours, and your Razorpay account ID and its status. Your bank account number, IFSC and PAN go directly to Razorpay and are not stored by Aryun.
3. What we use it for
Only for: making, confirming, changing and cancelling bookings; taking advances and paying refunds; sending booking messages; preventing abuse and fraud; handling payment and technical complaints and bank payment disputes; and meeting legal and tax duties. We do not sell personal data and do not use it for advertising.
4. Who sees it
- The artist you booked with — your name, number, note and booking; your address only if you gave one.
- Razorpay — to process payments and refunds.
- Meta (WhatsApp) and our email provider (Resend) — to deliver booking messages.
- Supabase and Railway — the companies that host our database and servers.
- Authorities, where the law requires it.
An artist's private address (for studio or home appointments) is shown to a client only after their booking is confirmed, never on the public page. Client details never appear on a public page.
Some of these providers store data outside India.
5. How long we keep it
| Data | Kept for |
|---|---|
| Booking, payment and refund records | 8 years, as tax and accounting law requires |
| Client contact details (name, mobile number, address) | Anonymised 3 years after your last booking, or sooner if you ask |
| Technical logs: message delivery logs, hashed IP addresses, anonymous page-step counts | 12 months |
6. Your rights
You can ask us to: tell you what data we hold about you; correct it; delete it (except what we must keep by law); and name someone to act for you if you cannot. Write to hello@aryun.io from, or quoting, the mobile number you booked with. We reply within 7 days and act within 30 days.
7. Security
Data is encrypted in transit. Access is limited: an artist can see only their own clients and bookings, and booking pages are opened by a long private link, not by a guessable number. If a breach affects your data we will tell you and the Data Protection Board as the law requires.
8. Children
Aryun is not meant for anyone under 18 to book on their own. A parent or guardian should book for them.
9. Grievances
Grievance officer: Ashita Patel, Aryun & Co, hello@aryun.io, at the address above. Write to her with any question or complaint about your personal data or this policy. We acknowledge complaints within 48 hours. If you are not satisfied with our answer, you may complain to the Data Protection Board of India.
10. Changes
We will post changes here and update the date above.