EMVARI

Privacy Policy

How Emvari collects, uses, and shares information when you discover, book, and pay for services

Last Updated / Effective: 08/25/2026

This Privacy Policy explains how Emvari (“Emvari,” “we,” “us,” or “our”) collects, uses, discloses, and otherwise processes information about you when you use our consumer websites, the Emvari marketplace, the Emvari customer mobile application, self-service kiosks located at participating businesses, and related services (the “Services”), and when you otherwise interact with us. It applies to clients and consumers who use the Services to discover, book, and pay for services.

If you are a salon, spa, studio, or other business using Emvari to run your operation, or a member of a business’s staff, your relationship with us is governed by the Emvari Business Terms of Service and, where applicable, a separate business privacy notice, not this policy.

When this policy applies — and when a business’s policy applies instead

Emvari plays two different roles depending on how information is collected:

1. Emvari as the responsible party (controller). When you discover businesses in the marketplace, use the Emvari customer app, or interact with Emvari directly, we determine how your information is handled, and this Privacy Policy applies.
2. Emvari acting for a business (service provider/processor). When a business uses Emvari’s software to manage its own client records — for example, its appointment history, notes, and files about you — we process that information on the business’s behalf and under its instructions. That business, not Emvari, controls how that information is used, and its own privacy policy governs. Please refer to the business’s privacy policy for those practices.

Changes to this policy

We may update this Privacy Policy from time to time. If we make changes, we will revise the “Last Updated” date above, and for material changes we will provide additional notice (such as an email). We encourage you to review it periodically.

1. Information We Collect

1.1 Information you provide to us

We collect information you give us directly, including:

1. Identifiers and contact information — name, email address, phone number, and, where you provide it, postal address.
2. Account information — login credentials and preferences you set.
3. Booking and service information — the businesses and professionals you book, services selected, appointment times, waitlist entries, and your service preferences (for example, preferred stylist, comfort or accessibility preferences).
4. Payment information — amounts, tips, and the payment method used. Card details are collected and tokenized by our third-party payment processor; Emvari does not receive or store full card numbers.
5. Intake, consultation, and waiver information — information you provide on forms and waivers before or during an appointment, which may include allergy disclosures, skin- or scalp-condition notes, and other health-related details. See Section 2 (Consumer Health Data).
6. Content you post or share — ratings, reviews, messages, and photos (such as inspiration or reference images you share with a business).
7. Communications — information in your messages to businesses or to Emvari support.

1.2 Information we collect automatically

When you use the Services, we automatically collect:

1. Transaction information — when and where bookings and payments occur, the parties, a description, and amounts.
2. Device, usage, and activity information — hardware and browser type, operating system, app version, IP address, unique device identifiers, access dates and times, pages viewed, links clicked, and search terms.
3. Approximate and (with consent) precise location — we infer approximate location from your IP address to show nearby businesses, and, only with your permission, may collect precise device location. You can turn the precise location off at any time in your device settings.
4. Cookies and similar technologies — see Section 5.

1.3 Information from other sources

1. Businesses (Providers) — a business may share information with the parts of the Services we control, for example to confirm a booking or process a payment.
2. Social or third-party sign-in — if you log in through a third-party platform (such as Apple or Google), we receive limited profile information as authorized by that platform.
3. Fraud-prevention and security providers — to help protect the Services and prevent fraud.

1.4 Information we infer

We may draw limited inferences from the information above — for example, inferring your general area from your IP address to surface nearby businesses. We do not use sensitive or health-related information to infer characteristics about you for advertising.

2. Consumer Health Data

Some information you provide — for example, on intake forms, consultation questions, allergy disclosures, skin- or scalp-condition notes, and consent waivers, whether completed online or at a kiosk — may relate to your health and may qualify as “consumer health data” under laws including the Washington My Health My Data Act, the Nevada consumer health data law, and the Connecticut Data Privacy Act.

WE DO NOT SELL CONSUMER HEALTH DATA, AND WE DO NOT USE OR DISCLOSE IT FOR TARGETED ADVERTISING.

Where those laws apply, we collect, use, and share consumer health data only as described in, and consistent with the consent obtained through, our Consumer Health Data Privacy Notice. That Notice describes the categories we process, the purposes, who may receive the data, and your rights — including the right to withdraw consent and to have the data deleted. If there is any conflict between this Privacy Policy and the Consumer Health Data Privacy Notice regarding consumer health data, that Notice controls.

3. Information Collected at Kiosks

Businesses may operate Emvari self-service kiosks for check-in, preferences, payment, tipping, rebooking, review requests, forms and waivers, and retail purchases. Information entered at a kiosk, which may include your name, contact details, preferences, payment authorization, signatures, and form or waiver responses, is handled as described in this Privacy Policy and, where applicable, the Consumer Health Data Privacy Notice. Kiosks are located in the business’s space; the business is responsible for the physical environment of the kiosk.

4. How We Use Information

We use the information we collect to:

1. Provide, maintain, and improve the Services, including discovery, booking, payment, check-in, and rebooking;
2. Process bookings and payments and facilitate service requests with businesses;
3. Show you nearby and relevant businesses and availability;
4. Send transactional messages — confirmations, reminders, receipts, and account or security notices;
5. Send marketing communications where you have opted in (you can opt out at any time — see Section 7);
6. Personalize your experience (excluding sensitive or health-related information);
7. Monitor usage and analyze trends to improve the Services;
8. Detect, investigate, and help prevent fraud, security incidents, and other unlawful activity, and protect the rights and safety of Emvari, users, and the public; and
9. Comply with legal obligations.

5. Cookies, Analytics, and Advertising

We use cookies, pixels, SDKs, and similar technologies to operate the Services, remember your preferences, understand usage, and measure the performance of our own marketing. You can usually adjust your browser or device settings to remove or reject cookies, and you can manage certain preferences through the “Your Privacy Choices” or cookie-preferences link in our footer. Removing cookies may affect some functionality.

Our current posture: Emvari does not sell your personal information and does not share it for cross-context behavioral advertising. If this changes, we will update this policy and provide the opt-out mechanisms required by law before doing so.

6. How We Disclose Information

We disclose information about you:

1. To businesses (Providers) you book — so they can provide the service, contact you, and maintain their records.
2. To service providers and vendors — such as our payment processor, hosting, messaging/SMS, analytics, and fraud-prevention providers, who process information on our behalf under contract.
3. For legal reasons — to comply with law or legal process, or to respond to lawful requests by authorities.
4. To protect rights and safety — of Emvari, our users, and the public.
5. To professional advisors — legal, financial, and insurance advisors, as needed.
6. In corporate transactions — in connection with a merger, financing, acquisition, or sale of assets.
7. With your consent or at your direction.

We may also disclose aggregated or de-identified information that cannot reasonably be used to identify you.

Public content: reviews and other content you choose to post may be visible to the public.

7. Data Retention

We retain personal information associated with your account for as long as your account is active, and other information for as long as needed for the purposes described in this policy or as required by law, after which we delete or de-identify it. Specific retention periods for certain records — including signed waivers and consumer health data — are described in the Consumer Health Data Privacy Notice and applicable business terms.

8. Your Choices

SMS note: we do not share your phone number or SMS consent with third parties or affiliates for their own marketing. Marketing texts are sent only where you have opted in; consenting to marketing is never a condition of booking.

9. Your U.S. State Privacy Rights

Several U.S. states give residents specific privacy rights. If you reside in a state with a comprehensive consumer privacy law (including California, Colorado, Connecticut, Delaware, Iowa, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia), this section applies to you. It also serves as our California notice at collection.

9.1 Your rights

1. Access / know — request the personal information we hold about you, in a portable format.
2. Correct — request correction of inaccurate personal information.
3. Delete — request deletion of your personal information.
4. Opt out — opt out of any sale, sharing, or targeted advertising and of certain profiling. As described in Section 5, Emvari’s current posture is that we do not sell or share personal information for cross-context behavioral advertising.
5. Withdraw consent — including for consumer health data, as described in the Consumer Health Data Privacy Notice.
6. Non-discrimination — we will not discriminate against you for exercising your rights.

9.2 Sensitive information

We do not use or disclose sensitive personal information (including any health-related information) to infer characteristics about you, and we do not sell it or use it for targeted advertising.

9.3 How to exercise your rights

Submit a request to hello@emvari.com. We will verify your request and respond within the timeframes required by law. If we deny your request, you may appeal by contacting us again. If you have concerns about the outcome, you may contact the attorney general in your state. You may use an authorized agent to submit a request, subject to verification.

9.4 Universal opt-out signals

Where required, we honor recognized universal opt-out signals such as Global Privacy Control (GPC) for opt-out preferences on the browser or device you are using.

9.5 Children

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. We do not sell or share, or use for targeted advertising, the personal information of consumers we know to be under 16. If you believe a child has provided us information, contact us at hello@emvari.com

10. Where We Operate

Emvari is based in and offers the Services only in the United States. We process and store information on servers in the United States. The Services are not intended for individuals located outside the United States.

11. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. No system is perfectly secure, and we cannot guarantee the security of information transmitted to or from the Services.

12. Contact Us

Questions about this Privacy Policy or our practices can be sent to:

EMVARI

2316 N 81st Pl Scottsdale, AZ 85257

hello@emvari.com

By using the Services, you acknowledge this Privacy Policy. Sensitive and health-related information is handled under the Consumer Health Data Privacy Notice, and this policy is read together with the Marketplace User Agreement.