Privacy Policy

Who we are

Noriva ("we", "us") is a booking management platform for beauty and wellness businesses. The data controller is [Your Name / Company], [Address], Lithuania. Contact: privacy@noriva.app.

What data we collect

• Account data — email address, name (from Google or entered manually), authentication tokens.
• Booking data — name, email, phone number, appointment details you provide when booking.
• Usage data — pages visited, actions taken in the app, timestamps.
• Technical data — IP address, browser type, device information collected automatically.

Why we collect it

• To provide the booking service (contract performance, Art. 6(1)(b) GDPR).
• To send booking confirmations, reminders, and cancellation notices (contract performance).
• To comply with legal obligations such as record-keeping (Art. 6(1)(c) GDPR).
• To improve the service and prevent abuse (legitimate interests, Art. 6(1)(f) GDPR).

Who we share data with

• Supabase — database and authentication (EU region).
• Vercel — hosting infrastructure.
• Resend — transactional email delivery.
• The salon or business you booked with can see your name, email, and booking details.

We do not sell personal data.

How long we keep it

Booking records are kept for the period configured by each business (default 36 months). Account data is kept until you delete your account. After deletion, data is anonymised or permanently erased within 7 days.

Your rights (GDPR)

You have the right to:

• Access a copy of your personal data — use My account → Export my data.
• Correct inaccurate data — contact us or update your profile.
• Delete your data — use My account → Delete my account.
• Restrict or object to processing — email privacy@noriva.app.
• Data portability — included in the export function.
• Lodge a complaint with the Lithuanian Data Protection Inspectorate (vdai.lrv.lt).

Cookies

We use only strictly necessary session cookies required for authentication. No advertising or tracking cookies are used. No cookie consent is required for strictly necessary cookies under ePrivacy rules.

Changes

We may update this policy. Material changes will be communicated by email or an in-app notice. Continued use after changes constitutes acceptance.