Privacy Policy
Last updated: August 2026
1. Who we are
Vayro is a beauty booking platform operated by Vayro, based in Belgium. We connect clients with hair and beauty professionals. You can contact us at support@vayro.be.
2. Data we collect
We collect the following personal data when you use Vayro:
- Account data: name, email address, phone number, profile photo.
- Booking data: appointment details, service history, messages between clients and professionals.
- Payment data: handled by Stripe. We do not store card numbers. For professionals, we collect payout account details via Stripe Connect.
- Location data: approximate location to show nearby professionals (only when you grant permission).
- Device data: device type, OS version, push notification token.
3. How we use your data
- To provide and improve the Vayro service.
- To process bookings and payments.
- To send booking confirmations, reminders and support messages.
- To send push notifications (you can opt out at any time in your device settings).
- To comply with legal obligations.
4. Legal basis (GDPR)
We process your data on the following legal bases:
- Contract: to fulfil your bookings and payments.
- Legitimate interest: to operate and improve the platform.
- Consent: for push notifications and marketing emails.
- Legal obligation: for tax and financial record-keeping.
5. Data sharing
We share your data only with:
- Stripe — payment processing and Connect payouts.
- Firebase (Google) — authentication, database and cloud functions.
- OneSignal — push notifications and transactional emails.
- Sentry — anonymised error reporting.
We do not sell your personal data to third parties.
6. Data retention
We retain your account data for as long as your account is active. Booking and payment records are kept for 7 years to comply with Belgian tax law. You can request deletion of your account at any time (see section 8).
7. Cookies
Our website (vayro.be) uses only essential cookies required for the site to function. We do not use advertising or tracking cookies.
8. Your rights
Under GDPR you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Request deletion of your data.
- Export your data in a portable format.
- Object to or restrict certain processing.
To exercise any of these rights, email us at support@vayro.be. We will respond within 30 days. You can also submit a data export or deletion request directly from the Vayro app under Settings → Privacy.
9. Security
We use industry-standard security measures including HTTPS, Firebase security rules, and Stripe's PCI-compliant payment infrastructure to protect your data.
10. Contact & complaints
For privacy questions contact us at support@vayro.be.
If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Belgian Data Protection Authority: dataprotectionauthority.be.