Privacy Policy
Last updated: October 5, 2026
This policy explains how Visaro handles personal data on visaro.app, admin.visaro.app and the booking pages at {name}.visaro.app.
Who we are
Visaro is operated by Private Entrepreneur Pavel Ivanov, registered in the Republic of Armenia (TIN 20315453, state registration number 286.1588453), 12 Vagharshyan St., Arabkir, Yerevan 0012, Armenia ("Visaro", "we", "us").
Contact for anything in this policy: help@visaro.app.
Two roles
- Business accounts. When you sign up to take bookings (as an owner or a specialist), we decide how your account data is used. For this data we are the controller.
- Your clients' data. When a client books with a business on Visaro, the business decides why that data is collected and how it is used. We store and process it on the business's behalf, as its processor, under our Terms of Service and Data Processing Addendum. Clients should contact the business first. We will help the business answer the request.
What we collect
From business users
- Account: email address, name, and, if you sign in with Google, your Google account ID.
- Business details you enter: business name, page address, address, phone, social links, opening hours, services, prices, schedules, photos and descriptions.
- Team: names, photos and short bios of specialists, and the emails of people you invite.
- Sign-in sessions: IP address, browser and device type, so you can stay signed in and we can protect your account.
- Billing, if you buy a paid plan: Paddle, our reseller, shares with us your name, email, country and the status of your subscription. Paddle processes your payment details. We never see your full card number.
From clients who book (processed for the business)
- Name and phone number.
- The booking: service, specialist, date and time, and an optional comment.
- Notes, visit history and no-shows recorded by the business.
From everyone who visits
- IP address, used briefly to limit abuse (rate limiting), and a bot check by Cloudflare Turnstile on booking forms.
- Standard server logs kept by our hosting provider.
We do not use advertising trackers on visaro.app at the moment. If we add them, we will update this policy and ask for consent where the law requires it.
Why we use it
| Purpose | Legal basis (where GDPR-style laws apply) |
|---|---|
| Creating and running your account, publishing your booking page | Performance of our contract with you |
| Sending sign-in codes and service emails | Performance of contract |
| Keeping the service secure and preventing spam and abuse | Our legitimate interests |
| Storing and showing bookings for a business | On the business's instructions (we are its processor) |
| Meeting legal obligations | Legal obligation |
We do not sell personal data. We do not use clients' data to contact them for our own purposes.
Who we share it with
We use these service providers to run Visaro:
| Provider | What for | Location |
|---|---|---|
| Vercel | Hosting and serverless functions | Singapore, with a global content network |
| Neon | Database | Singapore |
| Cloudflare (R2, Turnstile) | Photo storage, bot protection | Global |
| Upstash | Rate limiting | Singapore |
| Resend | Sign-in and service emails | United States |
| Paddle | Payments for paid plans, as merchant of record | United Kingdom, United States |
| Sign-in with Google, if you choose it | United States |
We may also disclose data if the law requires it, or to a buyer if Visaro is sold, under the same protections.
International transfers
Our main data storage is in Singapore. Some providers process data in other countries, including the United States. Where the law requires it, we rely on contractual safeguards such as standard contractual clauses offered by these providers.
How long we keep it
- Account and business data: while your account is active. When you delete your business, we delete its data, including its clients and bookings, 30 days later. During those 30 days you can ask us to restore it.
- Client data: as long as the business keeps it, or until the business is deleted.
- Rate-limit records: minutes. Server logs: as set by our hosting provider, usually days.
- Backups are overwritten on a rolling schedule.
Your rights
Depending on where you live, you can ask to access, correct, delete or export your data, object to or limit its use, and withdraw consent. Write to help@visaro.app. We reply within 30 days. You can also complain to your local data protection authority.
If you booked with a business on Visaro, please contact that business first. It controls your booking data.
Children
Business accounts are for people aged 18 and over. Visaro is not directed at children.
Cookies
We use only the cookies needed for the service to work:
- a sign-in cookie on admin.visaro.app that keeps you signed in;
- a Cloudflare Turnstile cookie on booking forms that tells people from bots.
We do not use analytics or advertising cookies at the moment.
Changes
We will post changes on this page and update the date at the top. For significant changes, we will email business users.