Privacy Policy

This Privacy Policy explains what information Mehvara collects, how we use it, and the choices you have, whether you're a client booking a mehendi artist or an artist running your business on the platform. It should be read alongside our Terms of Service. By using Mehvara, you agree to the collection and use of information as described here.

From clients: your name, phone number, email address and the number of people when you request a booking (an artist logging a booking for you may add just your name and phone number); details about the booking itself, such as the date and time, venue or address (including a map location if you pick one), any notes, and a design image if you choose to upload one; and, if an artist asks for a deposit, proof of that payment (amount, bank reference and a receipt image you upload). If you sign in, we also keep the artists you save and the reviews you write.

From artists: your business name, owner name, phone number, email address and password; your business profile (bio, country and city, pricing, social and contact links, and profile photo); portfolio images; your packages, quotations, invoices and the payments you record; the names and phone numbers of any employees you add; and, if you ask clients for deposits, the bank account details you enter so they can pay you. If you ask to upgrade to Pro, we keep the details you send with that request.

From everyone: reviews written about completed bookings; a record of when you agreed to our Terms of Service and this Privacy Policy, and which version, when you register as an artist or request a booking; basic technical information (such as IP address, browser type and the pages requested) that our hosting and database providers record automatically when you use the site; and, to protect accounts from password guessing, a log of each sign-in, sign-up, password reset and code attempt (the email address or account it was for, your IP address, the time and whether it worked), kept for 30 days.

We use the information above to operate the core of Mehvara: creating and managing bookings, quotations and invoices; showing artist profiles and portfolios to clients; verifying artist accounts; letting you sign in and manage what you've booked; sending emails about your bookings and account (for example, a new booking request, a quotation, an invoice, a receipt once an invoice is paid in full, a request to review a completed booking, or a sign-in code); responding to support requests; keeping a record that you agreed to our Terms of Service and this Privacy Policy; and improving and securing the Service. We do not use your information to make automated decisions that have a legal or similarly significant effect on you.

Clients sign in without a password: you enter the email address you booked with, and we email you a 6-digit code to confirm it's you. Codes are stored only in scrambled (hashed) form, expire after 10 minutes and can be used once. Once you're signed in, we keep a session record so you stay signed in on that device. Anyone with access to your email inbox could sign in this way, so keep your email account secure.

Artists sign in with an email address and password, handled by our sign-in provider. Your password is never stored in readable form. When you choose a password, we check it isn't one that has appeared in a known data breach: only the first few characters of a scrambled (hashed) version are sent to that breach-checking service, never the password itself.

Protecting sign-in: repeated failed attempts are slowed down and temporarily blocked, and sign-in forms may ask you to complete a CAPTCHA check (provided by hCaptcha) to show you're not an automated program. Mehvara's own team accounts also need a code from an authenticator app.

With the other party to a booking: to complete a booking, we share what's needed between the client and artist involved. For example, an artist sees the booking details and contact information a client submits, and a client sees the artist's public profile, their quotations and invoices, and, when a quotation asks for a deposit, the bank details the artist entered for receiving it. Artists and clients often continue the conversation on WhatsApp, which is covered by WhatsApp's own privacy policy.

With people helping on a booking: if an artist brings in helpers or another artist for a booking, the artist may share the details they need, such as the date, time, venue and number of people.

Publicly: an artist's business profile, portfolio and reviews are public, and each review shows the reviewing client's name.

With service providers: we use third-party providers to help run Mehvara, for hosting, our database, sign-in and file storage, email delivery, maps and location search, CAPTCHA checks, and checking new passwords against known data breaches, and share only what those providers need to do that job.

We do not sell your personal information. We may disclose information if required by law, to protect the rights or safety of Mehvara or our users, or in connection with a merger, acquisition or sale of assets (in which case we'll let you know).

We keep your account, booking and review information for as long as your account is active and as needed to provide the Service, for example to maintain a record of past bookings and reviews for both parties.

If you ask us to delete your account, we'll remove or de-identify your personal information. Deleting an artist account removes the account along with its profile, portfolio, bookings, quotations, invoices and uploaded images. Deleting a client account removes your name and contact details, your saved artists and any payment receipts or design images you uploaded; the artists you booked keep their own records of those bookings, with your details removed. We may keep certain records where we're required to for legal, tax or dispute-resolution purposes.

You can review and update most of your account information yourself: clients through their Profile page once signed in, artists through Business Settings. You can also contact us to request a copy of the personal information we hold about you, ask us to correct it, or ask us to delete your account (see Section 6 for what deletion removes). We'll respond to these requests within a reasonable time.

Mehvara uses essential cookies and similar technologies (such as your browser's local storage) to keep you signed in and to remember basic preferences, such as whether the dashboard sidebar is collapsed. When you use the venue search on a booking form, our maps provider's service loads and may set its own cookies, and the same goes for our CAPTCHA provider when a sign-in form shows its check. We don't currently use analytics or advertising cookies.

We take reasonable technical and organizational measures to protect your information, including restricting who can access it, securing how it's transmitted and stored, and limiting repeated sign-in attempts. For example, payment receipts and design images that clients upload are kept in private storage that only the artist they were sent to and our team can view. That said, no method of transmission or storage over the internet is completely secure, and we can't guarantee absolute security.

We may update this Privacy Policy as Mehvara grows and changes, for example as we add payment processing or expand to new regions. We'll post any changes here with a new "Last updated" date, and for material changes we'll try to let you know directly.

Questions about this Privacy Policy or your information? Reach us at mehvaradesign@gmail.com or through the Contact Us page.