Rezervo
AZEN

Rezervo Staff

Privacy Policy

Effective Date: October 9, 2026

1. Scope and Responsible Entity

This Policy explains how "TRAYVEX TECH" MMC (Tax ID: 1906760211, Legal Address: AZ1049, Baku, Surakhani district, Amirjan settlement, Jabir Aliyev street, dead-end 1, house 2B) processes personal data regarding the «Rezervo Staff» mobile application and related staff services (the “App”). For privacy inquiries, support, and account deletion, contact: support@rezervo.az. Website: www.rezervo.az.

Legal Roles: According to the Law of the Republic of Azerbaijan "On Personal Data," the salon or other enterprise using Rezervo (the “Enterprise”), which determines the purposes of collecting customer, booking, and staff work records, is considered the Data Owner (Mülkiyyətçi) of the personal data. "TRAYVEX TECH" MMC acts as the Data Operator (Operator), operating based on the Enterprise's instructions within the framework of platform operation, technical support provision, and data management. This Policy applies to staff users (masters) and the information they provide about customers.

2. Data We Process and Sources

  • Account and Professional Profile: Name, email, account and Enterprise identifiers, role, branch, services, work schedule, and profile information; professional photo or biography if added by the Enterprise.
  • Authentication and Security: Password hashes (instead of readable passwords), invitation and password recovery records, session/login identifiers, IP addresses, errors, and security logs. Passwords are used only for authentication and are not stored in the App.
  • Bookings and Work Activity: Customer names, booking identifiers, services, dates, times, status changes, and work records. When creating a manual booking, you may enter the customer's phone number and (optionally) email. Customer phone numbers are hidden on the general schedule screen.
  • Operational Statistics: Summaries regarding the number of bookings, completed services, and booking amounts associated with a staff member or the Enterprise.
  • Device and Technical Data: Operating system, notification token, IP address, App and environment version.
  • Financial Data (Exception): No online payment processing is conducted through the App, and bank card details are strictly not processed/collected.
  • Optional Marketing Data: Email, consent/opt-out status, and message delivery/read records.

Data is obtained from you, the Enterprise, your device, and delivery providers. The App does not access functions such as the microphone, camera, photo library, or precise location without permission.

3. Purposes and Legal Bases

We process data to verify authorized users, display bookings and available times, send security messages, calculate business statistics, and prevent unauthorized access. Processing is conducted in compliance with the requirements of the Law of the Republic of Azerbaijan "On Personal Data." We do not sell personal data and do not use it for behavioral advertising (targeting). We do not make automated decisions about you using App statistics; management decisions are made by the Enterprise (Data Owner) itself.

4. Who Receives the Data

  • Your Enterprise and Authorized Persons: Access is strictly limited by role and affiliation.
  • Technical Providers (Railway): Provides backend and hosting infrastructure.
  • Notification Providers (Expo, Apple APNs, Google FCM): Used for delivering push notifications. (This is not used for advertising analytics).
  • Email Providers: Used for delivering invitations, password recoveries, and service messages.
  • State Authorities: Data may be disclosed only in the event of a specific legal requirement (court order or official agency request).

5. Processing Abroad (Cross-Border Transfer)

Our providers for hosting, notifications, and email infrastructure (Railway, Expo, Apple, Google, etc.) may process data outside of Azerbaijan (on cloud servers). Cross-border transfers are carried out in compliance with the legislation of Azerbaijan, security regulations, and appropriate protective measures.

6. On-Device Storage and Security

Authentication tokens and a limited offline copy (daily schedule, excluding customer phone numbers) are stored on mobile devices. Logging out clears the schedules from the device cache. Advanced security measures such as password hashing, data segregation by Enterprise, and HTTPS (SSL) encryption are applied in our systems. Nevertheless, you remain responsible for the physical security of your account and device.

7. Retention and Account Deletion

Personal data is retained as long as the account is active and necessary for the stated purposes.

  • Account Deletion: To delete a Rezervo Staff account, you may use the function within the App or contact support@rezervo.az. A verified request is executed within 3 business days, and your personal login details (login, password, device tokens) are deleted from active systems.
  • 1-Year Retention of Business Records: Even if you (the staff member) delete your account, customer bookings and related work (business) history completed with your participation are retained for 1 (one) year to meet the management and reporting needs of the Enterprise. After 1 year, this data is deleted or irreversibly anonymized unless a legal retention requirement applies.
  • Backups: Data in protected backups may remain for up to 30 days after deletion from the active system and is then automatically destroyed.

8. Your Choices and Rights

Under the legislation of the Republic of Azerbaijan, you have the right to request access to your data, correction of inaccuracies, restriction, or deletion. To exercise these rights, you may contact Us (the Operator) or the Enterprise where you work (the Data Owner). You can disable Push notifications from your device settings and opt out of marketing messages via email (this does not apply to essential security messages). Your right to apply to competent state authorities if necessary is fully protected.

9. Children and Sensitive Data

The App is not intended for children. The obligations of the Enterprise (Data Owner) apply to customer records entered by the Enterprise, including requirements regarding minors. The App is not designed to store medical diagnoses or other special categories of sensitive personal data. Entering unnecessary sensitive information into booking records is prohibited.

10. Modifications and Contact

When changes are made to this Policy, they will be published in the App and on the website with a new effective date. In the event of an inconsistency between the Azerbaijani and English (or other) versions of the Terms, the Azerbaijani version shall prevail to the extent permitted by law.

"TRAYVEX TECH" MMC (Tax ID: 1906760211) Legal Address: AZ1049, Baku, Surakhani district, Amirjan settlement, Jabir Aliyev street, dead-end 1, house 2B Privacy, Deletion, and Support Email: support@rezervo.az Website: www.rezervo.az