Privacy Policy

The Service is operated by Tvibo LLC (the “Operator”, “we”, “us”), 105 N 1st St #429, San Jose, CA, 95103. Contact: [email protected].

This Policy covers the Argus website, the web customer portal, and the mobile apps we build for salons. Each salon's app is published under that salon's own name and branding, but it is the same service, operated by us on the salon's behalf, and this Policy applies to it.

We are the controller of the account data needed to provide the Service to a salon (an “Organization”). For the data that an Organization enters about its own customers and their pets, the Organization is the controller and we act only as a processor on that Organization's behalf. The Organization is responsible for how it collects and uses its customers' data, including obtaining any required consents.

Depending on how the Service is used, the following data may be processed:

• Account and staff data: name, email, phone, date of birth, job title, commission rate, personal identification number, address, bank account (IBAN), avatar image, role, and login timestamps — entered by an Organization to manage its team.
• Customer data (entered by an Organization): name, phone and backup phone, email, preferred language, notes, and login timestamps.
• Pet data: name, breed, size category, microchip code, date of birth, notes, and an optional photo.
• Booking and checkout data: appointment details, services, prices, discounts, tax, tips, and staff attribution. Checkout records the payment method name only (e.g. “Cash” or “Card”). We do not collect or store card numbers, CVV, bank-card data, or payment-processor tokens — payments are taken in the salon, outside the Service.
• Ratings and reviews: after a completed visit a customer may rate the salon and the staff who served them (a score from 1 to 5) and leave a written comment. A review is published with a shortened display name — a first name and an initial, such as “Nino G.” — which is visible to other people.
• Communications: one-time login codes sent by email or SMS, appointment and grooming reminders sent by SMS, and delivery logs in which the codes themselves are redacted.
• Technical and audit data: a log of actions taken in the Service, including the identity of the person acting, their IP address, and approximate country, together with ordinary server request logs.

Using a salon's mobile app. The app is the customer portal delivered natively. It collects nothing beyond what is listed above, and there is no background collection — everything is either entered by the customer or generated by their own use:

• Phone number — typed at sign-in; it is the login identifier (required).
• First name (required) and last name (optional), asked once on first sign-in, and the preferred language chosen in the app.
• Pet details — name (required), breed, size category, date of birth, notes, and microchip code.
• Pet photo (optional) — see the note below.
• Appointments created by booking in the app, and ratings and comments given after a completed visit.
• One-time sign-in codes, delivered by SMS, and the time of last sign-in.
• Sign-in tokens, held on the device in the operating system's secure keychain — not on our servers.
• IP address and ordinary server request logs, as for the website.

Camera and photo library. The only device permissions the app asks for are the camera and the photo library, and only at the moment a customer chooses to add a photo of their pet. A pet photo is used to identify the animal at the salon and for nothing else. Because it is chosen from the customer's own library or camera, it may incidentally contain people; we do not analyse photos, and we do not use any face recognition.

We use personal data to:

• provide, operate, and maintain the Service;
• authenticate users via one-time email or SMS codes;
• manage pets and bookings, and send transactional messages — login codes, booking confirmations, and appointment or grooming reminders by SMS;
• pass a customer's rating and comment to the salon, and publish the review with a shortened display name;
• keep an audit trail for security, accountability, and troubleshooting;
• provide support and comply with legal obligations.

We do not sell personal data. Data in the Service — about salons, staff, customers and pets — is never used for advertising or cross-site tracking. The only advertising-related processing is on our public marketing website, and only if a visitor accepts cookies there, as described in section 4.

Our public marketing website (argus.pet, in every language) and the sign-up page use Google Analytics, provided by Google. Nothing else on argus.pet loads it: not the customer portal, the staff dashboard, the admin console, or the mobile apps.

What it is used for. To understand how visitors use the website — which pages are viewed, scrolling, clicks on outbound links, form interactions and similar — and to measure how well our own Google Ads perform, including whether a visit led to a salon signing up. When a salon finishes registering, the website records that a sign-up happened (and that it was made with an email address); it does not send your name, email address or any other details you entered.

Before you choose, and if you decline. Google Analytics sets no cookies. Google still receives cookieless signals — for example, that a page was viewed, with your browser's ordinary technical details and IP address — which it uses only in aggregated, modelled form to estimate overall usage and ad performance. These signals carry no cookie identifier.

If you accept. Google Analytics sets its own first-party cookies on argus.pet, and you allow the data to be used for analytics and for Google Ads measurement and ad personalisation (these are given together; there is no separate “analytics only” option). For advertising purposes Google processes the data as an independent controller under its own privacy policy — see how Google uses information from sites that use its services.

Legal basis. Cookies and advertising use are based on your consent (Art. 6(1)(a) GDPR, and the device-storage rules such as Art. 5(3) of the ePrivacy Directive and §25 TDDDG in Germany). The cookieless signals sent without consent are based on our legitimate interest in basic, aggregated measurement of our own website (Art. 6(1)(f) GDPR).

What is stored on your device:

Google may set further cookies of its own on its own domains (for example, if you are signed in to a Google account); those are governed by Google's policies.

Changing your mind. The cookie notice appears on your first visit, with equal Accept and Decline buttons. Your choice is kept for 12 months, after which you are asked again. You can change it — or withdraw consent — at any time with the Cookie settings link at the bottom of every page of the website. Withdrawing stops further use from that point; it does not affect processing that already took place, and cookies already set stay in your browser until they expire or you clear them. You can also manage ad personalisation in your Google ad settings or block Google Analytics with Google's opt-out browser add-on.

The customer portal and the mobile apps set no analytics or advertising cookies and use no advertising identifiers. The web portal uses functional browser storage only — to keep you signed in and to remember your light/dark theme preference. This storage is strictly necessary for the service you asked for and needs no consent. The mobile apps store sign-in tokens in the device's secure keychain and set no cookies at all.

So that there is no doubt about what the mobile apps do, and to match what we declare to the app stores, the apps contain:

• No analytics or usage tracking of any kind.
• No advertising and no advertising identifiers, no ad networks, and no profiling.
• No crash or diagnostic reporting to any third party.
• No location data — the apps never ask for location permission.
• No access to contacts, calendar, microphone or health data.
• No push notifications, and therefore no push tokens.
• No payment or card data — customers pay at the salon; the apps take no payments.
• No tracking of customers across other companies' apps or websites.

Links out of the app. An app may offer a link to somewhere else — for example, a salon's public listing on Google Maps, offered after a top rating so a customer can leave a public review if they wish. Following such a link opens your browser and hands you to that company, whose own terms and privacy policy then apply. Once you leave, this Policy no longer covers you.

We share data with a small number of providers strictly to run the Service, and only the data they need to do their job:

• Hosting and backups (Hetzner, in the European Union) — stores the application, the database, and its backups.
• Network and security (Cloudflare) — routes traffic to the Service and sees the connecting IP address and request metadata.
• SMS delivery — Twilio worldwide, and uBill for Georgian (+995) numbers. Each receives the recipient's phone number and the message content. A salon may choose to send through its own SMS account instead.
• Email delivery (Mailgun) — receives the recipient's email address and the message content.
• App distribution (Apple) — distributes the apps. We send Apple nothing; Apple keeps its own App Store records of downloads and purchases under its own privacy policy.
• Website analytics and ad measurement (Google Analytics, linked to Google Ads) — on the public marketing website and the sign-up page only, as described in section 4. Never in the customer portal, the staff dashboard or the apps.

We do not sell or rent personal data. We may disclose data if required by law or to protect our rights, users, or the public.

Our servers and backups are located in the European Union. Some of our providers — including Twilio, Mailgun and Google — process data in the United States. Customers and salons may be located anywhere. Where data is transferred internationally, it remains protected under this Policy and applicable law — for transfers from the EU, the UK and Switzerland, through the provider's certification under the EU–U.S. Data Privacy Framework (and its UK and Swiss extensions) where it holds one, or the European Commission's standard contractual clauses.

We keep data for as long as an Organization's account is active and as the Organization needs it for its own records and audit. One-time login codes expire after a short period and are then deleted. When records are deleted, they may persist for a limited time in backups or as soft-deleted entries before being fully removed.

When a customer deletes their account — which they can do in the app, under Settings — the following happens:

• the customer record and all of their pet records are marked deleted;
• every sign-in token stops working immediately;
• signing in again with the same phone number creates a new, empty account; the old one is not brought back;
• past appointments are kept. They are the salon's own business records of what was done, when, by whom and for how much. The salon retains them indefinitely for its accounting, tax and legal purposes, as the controller of those records.

We use passwordless (one-time code) login, encryption of data in transit, role-based access controls, and an immutable audit trail. In the mobile apps, sign-in tokens are stored in the device's secure keychain rather than in ordinary app storage. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

Subject to applicable law, you may have rights to access, correct, delete, or port your personal data, or to object to or restrict certain processing.

Deleting your account. If you use a salon's mobile app, you can delete your account from inside the app, under Settings. You can also ask the salon to do it for you. Section 8 explains exactly what deletion does.

If you are a customer or staff member of a salon, that salon is the controller of your data — please direct your request to the salon, which can act on it or ask us to assist. For account-level data we control, or general questions, contact us at [email protected].

The Service and our apps are intended for businesses and for adult pet owners aged 18 or over. They are not directed to children, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this Policy from time to time. When we do, we will revise the “Last updated” date above.

Tvibo LLC
105 N 1st St #429, San Jose, CA, 95103
[email protected]