Security practices
Encrypted SSL channels for web traffic and encrypted storage for customer data.
Automatic logout for idle sessions, OTP-based login for critical admin modules, and role-based access following minimum privilege.
Storage and access
Data is stored on access-controlled servers. Authorized engineers and support staff may access live data for debugging or assistance. Audit trails are maintained.
SMS data protection
SMS traffic is routed through secure APIs. Only required metadata, such as the phone number and message body, is passed to SMS gateways.
Full message history is not stored unless enabled by the user. Messages should not contain sensitive financial or personal identification information.
Breach notification
The published SalonFlow policy commits to notifying affected users within 72 hours of a data breach and isolating affected services to contain damage.
Review and account responsibilities
Systems are reviewed for vulnerabilities. Non-compliance or data tampering may result in account suspension. Contact info@salonflowpos.com for security concerns or consent requests.