Your data, handled with care

This Privacy Policy explains how ZibaDesk (operated by ConfigIT Pty Ltd, Australia) collects, uses, and protects your information when you use our salon management software and iOS/Android app. By using ZibaDesk, you agree to the practices described here.

Information we collect

We collect information in two ways:

Information you provide directly:

• Account details — your name, email address, and business name when you register.

• Business data — appointments, customer records, staff profiles, services, invoices, and payment records you create inside ZibaDesk.

• Photos — if you upload staff or service images, the app requests camera or photo library access.

• Support messages — any communications you send to our team.

Information collected automatically:

• Device information — device type, OS version, and app version, used to diagnose technical issues.

• Usage data — aggregated feature usage patterns to improve the product.

• IP address — for security and fraud prevention.

How we use your information

We use your information to:

• Operate and improve the ZibaDesk service

• Process payments and manage subscriptions

• Send transactional emails — account verification, password resets, booking confirmations

• Deliver SMS or WhatsApp messages to your customers when you use those campaign features

• Provide customer support and respond to your requests

• Detect and prevent fraud, abuse, and security threats

• Comply with legal and regulatory obligations

We do not sell your personal data. We do not share your customer records with third parties for advertising.

Third-party services we use

ZibaDesk shares limited data with the following service providers to deliver the product:

• Stripe (stripe.com/privacy) — payment processing for subscriptions. Stripe handles card data directly; ZibaDesk never stores full card numbers.

• Resend (resend.com/privacy) — transactional email delivery.

• Google Analytics (policies.google.com/privacy) — anonymised usage analytics.

• Xero (xero.com/legal/privacy) — optional accounting integration, only if you connect your Xero account.

• SMS and WhatsApp gateways — if you use messaging campaign features, messages are delivered via third-party providers.

Each provider operates under their own privacy policy and is contractually required to protect your data.

Mobile app permissions (iOS & Android)

The ZibaDesk app may request the following device permissions:

• Camera & Photo Library — to upload staff profile photos or service images. The app accesses photos only when you choose to upload one; it does not access your library in the background.

• Network access — to sync your salon data with the cloud and receive real-time updates.

You can grant or revoke permissions at any time from your device's Settings app. Revoking network access will disable cloud sync.

Data storage and security

Your data is stored on encrypted servers in Australia. We protect your information using:

• TLS/HTTPS encryption for all data in transit

• Encrypted storage for data at rest

• Access controls limiting who can view tenant data

• Automated daily backups

While we take industry-standard precautions, no system is completely risk-free. If a breach occurs affecting your personal data, we will notify you as required by Australian law.

How long we keep your data

We keep your data for as long as your account is active.

If you close your account or request deletion:

• Business data is retained for 30 days to allow recovery, then permanently deleted.

• Backup copies are purged within 30 days.

• Payment transaction records may be retained for up to 7 years to satisfy financial regulations.

To request deletion, email info@zibadesk.com.

Your rights

You have the right to:

• Access — request a copy of the personal data we hold about you.

• Correction — ask us to fix inaccurate or incomplete data.

• Deletion — ask us to delete your personal data.

• Portability — receive your data in a machine-readable format.

• Objection — object to certain processing, such as direct marketing.

Email info@zibadesk.com to exercise any of these rights. We will respond within 7 business days and may verify your identity before proceeding.

Children's privacy

ZibaDesk is a business management tool designed for adults running or working in beauty and wellness businesses. We do not knowingly collect personal information from anyone under 13 years of age. If you believe a child has provided us with personal data, please contact info@zibadesk.com and we will delete it promptly.

Contact us

If you have questions or concerns about this Privacy Policy or how your data is handled:

ZibaDesk — ConfigIT Pty Ltd
Email: info@zibadesk.com
Website: https://zibadesk.com

We respond to all privacy enquiries within 7 business days.

Last updated: April 2026