Privacy Policy

This Privacy Policy explains how obses (pre-launch) (“obses”, “we”, “us”) collects, uses, shares, and protects information when you use the obses mobile app, website at obses.in, and related services (the “Service”). obses is a discovery and booking platform that connects customers with independent beauty and grooming professionals in India — including nails, hair, skin, makeup, and related services.

By using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.

1. Information we collect

We collect the following categories of information:

• Account information. Your phone number, which is how you sign in, plus any name, profile photo, and city you choose to add. A name is optional and we ask for one at your first booking.
• Professional information. If you sign up as an artist: portfolio photos, services offered, pricing, working hours, and your studio or service-area address.
• Booking information. Services booked, scheduled time, location, notes, messages exchanged with the other party, ratings, and reviews.
• Location information. Approximate or precise device location (with your permission) so we can surface professionals near you and show travel ETAs.
• Payment information. Transaction amounts and status. Card and UPI details are collected and processed directly by our payment processor (Razorpay); obses does not store full payment instrument details on its servers. obses stores shop order details, delivery addresses and contact information to fulfil purchases, provide tracking and handle refunds.
• Device and security information. Push token, device platform, app version, IP address, request metadata, and security logs needed to deliver notifications, diagnose failures, rate-limit abuse, and protect the Service.
• Usage and session information. App opens, screens, discovery actions and journey events help us understand how the Service is used. When enabled, a sample of mobile sessions is recorded through Sentry to diagnose usability problems. Text, images and vector graphics are masked, and network request and response bodies are excluded. Authorized operators can review event timelines and open the associated recordings. Session event timelines are retained for up to 90 days and journey summaries for up to 120 days; recordings follow the configured Sentry project retention period.
• Communications. Messages you send to support and content you share with us when requesting help.

2. How we use information

• Provide, maintain, and improve the Service.
• Match customers with relevant artists and complete bookings, including processing payments.
• Send one-time passcodes by WhatsApp or SMS, and booking updates through the in-app inbox and push notifications.
• Personalise content — for example, ranking nearby professionals or suggesting looks based on your past activity.
• Detect, investigate, and prevent fraud, abuse, and policy violations, and to keep the Service secure.
• Comply with legal obligations, respond to lawful requests, and enforce our Terms.

3. How we share information

We do not sell your personal information. We share it only as described below:

• With the other party in a booking. We share only what the appointment needs, and only as it becomes needed. An artist sees your name, photo, and the area you’ve asked them to travel to. For a come-to-me booking, the artist can access your exact address after acceptance, within 24 hours of the appointment and until it ends. The same rule protects private studio addresses. Artists can choose in Studio to show their current studio address and exact map pin publicly, including to people without a booking. We do not expose your phone number to the other party; in-app chat and calling carry the conversation.
• Service providers. We use trusted vendors who process information on our behalf, including: authentication, database, and file storage (Supabase); application hosting and request rate limiting (Railway); one-time-passcode delivery over WhatsApp and SMS (sent.dm); in-app chat and calling (Stream / GetStream); menu extraction and look captions (Anthropic); look-composer image processing (fal.ai); safety checks on uploaded look photos, titles, and captions (OpenAI); semantic search over look photos, descriptions, and search text (Google Gemini API); maps and geocoding (Google Maps Platform); road-distance estimates between approximate map cells (OpenStreetMap/OSRM); push notifications (Expo); error reporting (Sentry); scheduling of background jobs (Hatchet, in the United States, which receives only internal identifiers and job metadata); payments (Razorpay); and shop delivery (Shiprocket and the selected courier). Delivery providers receive the recipient's contact details, delivery and billing addresses, and order details needed to ship the parcel and prepare shipping documents.
• WhatsApp delivery. When sent.dm selects WhatsApp to deliver a one-time passcode, your phone number and authentication message are also processed by WhatsApp/Meta.
• Legal and safety. We may disclose information if required by law, court order, or a valid government request, or where we believe disclosure is necessary to protect the rights, property, or safety of obses, our users, or others.
• Business transfers. If obses is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

4. Cookies and similar technologies

This website sets no cookies and runs no third-party analytics or advertising trackers. The obses app stores your sign-in session on your own device so you don’t have to re-enter a code on every launch.

5. Data retention

We retain personal information for as long as your account is active and as needed to provide the Service. When you delete your account, we keep your profile details and the records the account created — bookings, payments, points, reviews, and messages — because they are also the other person’s records and we need them for refunds, accounting, disputes, fraud prevention, and legal obligations.

6. Security

We use industry-standard safeguards — encryption in transit, access controls, and regular reviews — to protect personal information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your rights

Subject to applicable law (including India’s Digital Personal Data Protection Act, 2023), you have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your personal information, subject to legal retention requirements.
• Withdraw consent where we rely on consent to process data.
• Nominate another individual to exercise your rights in case of incapacity or death.
• File a grievance with our Grievance Officer (below).

You can manage most of these directly from the app, or contact us at help@obses.in.

8. Deleting your account

In the app, open Account and tap Delete account. You can delete your account once no booking or order is still open. Deleting signs you out and hides your account straight away, and signing in again within 30 days restores it. After 30 days the deletion is final: your sign-in is removed, so your number can start a new account, and an artist’s handle becomes available to others. The records described in “Data retention” are kept.

If you cannot open the app, email help@obses.in with the phone number on the account, and we will delete it for you under the same rules.

9. Children

The Service is intended for users 18 years of age and older. We do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact us and we will take steps to delete it.

10. International transfers

obses is based in India and the Service is primarily directed at users in India. Some of our service providers process data outside India. Where we transfer personal information abroad, we take steps to ensure it receives a level of protection consistent with this Policy and applicable law.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through an in-app notice, push notification, or another channel available for your account. The “Effective” date at the top of this page indicates when it was last revised.

12. Contact & Grievance Officer

For any questions, requests, or complaints about this Policy or our handling of your information, contact:

We will acknowledge your request within a reasonable period and respond within the timelines required by applicable law.