Privacy Notice

What Grahik keeps about you, and why.

Last updated 14 September 2026

Grahik is a queue and customer-visibility app for salons, clinics and other walk-in businesses in India. This notice explains, in plain language, what personal data we collect, what we do with it, and what you can ask us to do. It is written to meet the Digital Personal Data Protection Act, 2023.

Who is responsible

Grahik Technologies Pvt Ltd, Nagpur, Maharashtra, India, operates Grahik and is the Data Fiduciary for the data described below, except where this notice says a business is. Questions about your data go to privacy@grahik.app.

What we collect and why

We collect only what the page in front of you asks for. There are four situations.

1. You join a queue at a business

What	Your name and mobile number; the services you picked; when you joined, were served, and how you paid.
Why	To hold your place, show you where you are in the line, and let the business reach you about this visit.
Basis	You gave it to us for this purpose (a "legitimate use" under s.7(a) of the Act). No separate consent form is needed, and you can leave the queue at any time.
Who sees it	The business you joined sees your full name and number. Other people looking at that business's public queue see only your first name and an initial ("Priya S."), never your number.

2. A business records you as its customer

What	Your name, mobile number, visits, services taken and amounts paid — entered by the business, or carried over when you joined its queue.
Why	So the business can recognise you and keep its own records of the work it did for you.
Who is responsible	The business is the Data Fiduciary for this record. Grahik processes it on that business's instructions, as its Data Processor, and does not use it for anything else. To correct or erase it, ask the business first; if that does not work, ask us and we will take it up with them.

3. You run a business on Grahik

What	Your name and mobile number; your business's name, category, address, listed phone, photos, services and prices; who you add to your team and what each person may see.
Why	To sign you in (we send a one-time code instead of a password), to publish your business's page and queue, and to keep your money and customer records for you.
Basis	You gave it to us to open and run the account.

4. You claim a listing, or ask for one to be removed

What	Your name, a mobile number we can call, and anything you write in the note.
Why	To check that you speak for the business and to act on what you asked.
Basis	You gave it to us for this purpose.

Listings we created. Some business pages on Grahik were created by us from publicly available directory information — the business's name, area, category and public phone number — before the owner signed up. This is business information, not a record of any individual, and every such page carries a Remove this listing link that reaches us directly.

What we do not do

We do not sell, rent or share your data with advertisers or data brokers.
We do not run advertising, behavioural tracking or third-party analytics. The only cookie Grahik sets is the one that keeps you signed in.
We do not profile, score or target anyone, and we never will for anyone under 18.
We do not send marketing messages to customers who joined a queue.

Where it lives

Grahik runs on servers in Bengaluru, India, hosted by DigitalOcean. Business photos and encrypted database backups are stored with the same provider in Singapore, the nearest location it offers for that. Every connection to Grahik is encrypted (HTTPS). Access to the servers is limited to the people who run Grahik. No country we store data in has been restricted by the Government of India under the Act.

How long we keep it

One-time login codes expire 15 minutes after they are issued and cannot be used again.
Queue entries stay as part of the business's visit history so that the business can see who it served. If you leave a queue before being served, your entry is deleted then and there.
Customer records stay for as long as the business keeps them, or until you ask that business (or us) to erase them.
Business accounts stay for as long as the account is open. Ask us to close it and we will erase it.
Claim and removal requests are kept until we have acted on them, and then as a record of what was asked and done.
Backups are overwritten on a rolling basis; a record erased from Grahik leaves the backups as they roll over.

Where a law requires us to keep something longer — for instance a tax record of a payment — we keep only that, for only as long as that law says.

Your rights

Under the Act you may ask us to:

Tell you what personal data we hold about you and what we have done with it.
Correct anything that is wrong or out of date.
Erase your data, unless a law requires us to keep it.
Withdraw anything you agreed to, as easily as you agreed to it. Leaving a queue is one tap; closing an account is one email.
Nominate someone to exercise these rights for you if you die or cannot act.

To do any of these, write to privacy@grahik.app from any address, telling us the mobile number the data is under. We will confirm it is you by sending a one-time code to that number, and reply within 7 days. There is no charge.

If you are not satisfied

If we do not resolve your request within 7 days, or you are unhappy with what we did, you may complain to the Data Protection Board of India, the authority set up under the Act. We would rather hear from you first, but you do not have to.

Children

Grahik accounts are for people 18 and over. A parent or guardian may join a queue on behalf of a child using their own name and number. We do not track, profile or advertise to anyone, and that will not change for children.

If something goes wrong

If your personal data is exposed in a way that could harm you, we will tell you what happened, what it could mean for you, and what we are doing about it, as soon as we know — and report it to the Data Protection Board of India as the Act requires.

Changes to this notice

When we change what we collect or how we use it, we update this page and the date at the top. A change that affects you in a way you would want to know about will also be announced inside the app.

Contact

Grahik Technologies Pvt Ltd
Nagpur, Maharashtra, India
privacy@grahik.app