Privacy Policy

The Service is operated by Tvibo LLC (the “Operator”, “we”, “us”), 105 N 1st St #429, San Jose, CA, 95103. Contact: [email protected].

This Policy covers the Argus website, the web customer portal, and the mobile apps we build for salons. Each salon's app is published under that salon's own name and branding, but it is the same service, operated by us on the salon's behalf, and this Policy applies to it.

We are the controller of the account data needed to provide the Service to a salon (an “Organization”). For the data that an Organization enters about its own customers and their pets, the Organization is the controller and we act only as a processor on that Organization's behalf. The Organization is responsible for how it collects and uses its customers' data, including obtaining any required consents.

Depending on how the Service is used, the following data may be processed:

• Account and staff data: name, email, phone, date of birth, job title, commission rate, personal identification number, address, bank account (IBAN), avatar image, role, and login timestamps — entered by an Organization to manage its team.
• Customer data (entered by an Organization): name, phone and backup phone, email, preferred language, notes, and login timestamps.
• Pet data: name, breed, size category, microchip code, date of birth, notes, and an optional photo.
• Booking and checkout data: appointment details, services, prices, discounts, tax, tips, and staff attribution. Checkout records the payment method name only (e.g. “Cash” or “Card”). We do not collect or store card numbers, CVV, bank-card data, or payment-processor tokens — payments are taken in the salon, outside the Service.
• Ratings and reviews: after a completed visit a customer may rate the salon and the staff who served them (a score from 1 to 5) and leave a written comment. A review is published with a shortened display name — a first name and an initial, such as “Nino G.” — which is visible to other people.
• Communications: one-time login codes sent by email or SMS, appointment and grooming reminders sent by SMS, and delivery logs in which the codes themselves are redacted.
• Technical and audit data: a log of actions taken in the Service, including the identity of the person acting, their IP address, and approximate country, together with ordinary server request logs.

Using a salon's mobile app. The app is the customer portal delivered natively. It collects nothing beyond what is listed above, and there is no background collection — everything is either entered by the customer or generated by their own use:

• Phone number — typed at sign-in; it is the login identifier (required).
• First name (required) and last name (optional), asked once on first sign-in, and the preferred language chosen in the app.
• Pet details — name (required), breed, size category, date of birth, notes, and microchip code.
• Pet photo (optional) — see the note below.
• Appointments created by booking in the app, and ratings and comments given after a completed visit.
• One-time sign-in codes, delivered by SMS, and the time of last sign-in.
• Sign-in tokens, held on the device in the operating system's secure keychain — not on our servers.
• IP address and ordinary server request logs, as for the website.

Camera and photo library. The only device permissions the app asks for are the camera and the photo library, and only at the moment a customer chooses to add a photo of their pet. A pet photo is used to identify the animal at the salon and for nothing else. Because it is chosen from the customer's own library or camera, it may incidentally contain people; we do not analyse photos, and we do not use any face recognition.

We use personal data to:

• provide, operate, and maintain the Service;
• authenticate users via one-time email or SMS codes;
• manage pets and bookings, and send transactional messages — login codes, booking confirmations, and appointment or grooming reminders by SMS;
• pass a customer's rating and comment to the salon, and publish the review with a shortened display name;
• keep an audit trail for security, accountability, and troubleshooting;
• provide support and comply with legal obligations.

We do not sell personal data, and we do not use it for advertising or cross-site tracking.

Our public marketing website (argus.pet) uses Google Analytics to understand how the site is used. This sets cookies and shares usage data with Google. It runs on the marketing pages only.

The customer portal and the mobile apps set no analytics or advertising cookies and use no advertising identifiers. The web portal uses functional browser storage only — to keep you signed in and to remember your light/dark theme preference. The mobile apps store sign-in tokens in the device's secure keychain and set no cookies at all.

So that there is no doubt about what the mobile apps do, and to match what we declare to the app stores, the apps contain:

• No analytics or usage tracking of any kind.
• No advertising and no advertising identifiers, no ad networks, and no profiling.
• No crash or diagnostic reporting to any third party.
• No location data — the apps never ask for location permission.
• No access to contacts, calendar, microphone or health data.
• No push notifications, and therefore no push tokens.
• No payment or card data — customers pay at the salon; the apps take no payments.
• No tracking of customers across other companies' apps or websites.

Links out of the app. An app may offer a link to somewhere else — for example, a salon's public listing on Google Maps, offered after a top rating so a customer can leave a public review if they wish. Following such a link opens your browser and hands you to that company, whose own terms and privacy policy then apply. Once you leave, this Policy no longer covers you.

We share data with a small number of providers strictly to run the Service, and only the data they need to do their job:

• Hosting and backups (Hetzner, in the European Union) — stores the application, the database, and its backups.
• Network and security (Cloudflare) — routes traffic to the Service and sees the connecting IP address and request metadata.
• SMS delivery — Twilio worldwide, and uBill for Georgian (+995) numbers. Each receives the recipient's phone number and the message content. A salon may choose to send through its own SMS account instead.
• Email delivery (Mailgun) — receives the recipient's email address and the message content.
• App distribution (Apple) — distributes the apps. We send Apple nothing; Apple keeps its own App Store records of downloads and purchases under its own privacy policy.
• Website analytics (Google Analytics) — on the public marketing website only, as described in section 4.

We do not sell or rent personal data. We may disclose data if required by law or to protect our rights, users, or the public.

Our servers and backups are located in the European Union. Some of our providers — including Twilio, Mailgun and Google — process data in the United States. Customers and salons may be located anywhere. Where data is transferred internationally, it remains protected under this Policy and applicable law.

We keep data for as long as an Organization's account is active and as the Organization needs it for its own records and audit. One-time login codes expire after a short period and are then deleted. When records are deleted, they may persist for a limited time in backups or as soft-deleted entries before being fully removed.

When a customer deletes their account — which they can do in the app, under Settings — the following happens:

• the customer record and all of their pet records are marked deleted;
• every sign-in token stops working immediately;
• signing in again with the same phone number creates a new, empty account; the old one is not brought back;
• past appointments are kept. They are the salon's own business records of what was done, when, by whom and for how much. The salon retains them indefinitely for its accounting, tax and legal purposes, as the controller of those records.

We use passwordless (one-time code) login, encryption of data in transit, role-based access controls, and an immutable audit trail. In the mobile apps, sign-in tokens are stored in the device's secure keychain rather than in ordinary app storage. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

Subject to applicable law, you may have rights to access, correct, delete, or port your personal data, or to object to or restrict certain processing.

Deleting your account. If you use a salon's mobile app, you can delete your account from inside the app, under Settings. You can also ask the salon to do it for you. Section 8 explains exactly what deletion does.

If you are a customer or staff member of a salon, that salon is the controller of your data — please direct your request to the salon, which can act on it or ask us to assist. For account-level data we control, or general questions, contact us at [email protected].

The Service and our apps are intended for businesses and for adult pet owners aged 18 or over. They are not directed to children, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this Policy from time to time. When we do, we will revise the “Last updated” date above.

Tvibo LLC
105 N 1st St #429, San Jose, CA, 95103
[email protected]