How the Master Clients service and the Master Clients mobile app (iOS and Android) process user data.
Data controller
MASTER KASSA LLC (ООО «МАСТЕР КАССА», TIN 5044138774), the owner of Master Clients: office 1617, bld. 1, 42 Bolshoy Boulevard, Skolkovo Innovation Center, Moscow, 121205, Russia. Email: info@masterkassa.com.
Who uses the app
- Company staff (owners, administrators, managers, specialists) sign in with the email and password issued by their company on masterclients.pro.
- Company clients sign in with their phone number and a one-time code to see their appointments and bonuses and to book online.
Data we collect
- Staff: name, email, role, company and branch, and the CRM data they work with (appointments, clients, sales) according to the permissions set by the company.
- Clients: phone number; name, appointments, visits and bonuses from the records of companies where the client was booked with this number.
- Technical data: device model and OS version (for the list of signed-in devices), IP address, language, push notification token, sign-in time.
The app does not access location, contacts, photos or files, or advertising identifiers. We do not show ads, do not track users across other apps and websites, and do not sell data.
Purposes
- signing in and protecting the account (sign-in log, ending sessions);
- providing the service: calendar, appointments, sales, reviews and other CRM sections;
- notifications: new appointments, changes and payments for staff; booking confirmations, reminders and bonuses for clients. Notification types can be turned off in the app: "Notifications" → settings icon;
- client sign-in code: the company sends it via Telegram, WhatsApp, SMS or the email from the client record; the code itself is not stored in logs.
Who receives the data
- The company where the staff member works or the client is booked: client and appointment data belongs to that company, and Master Clients processes it on the company's behalf.
- Expo (650 Industries, Inc.), Apple Push Notification service and Firebase Cloud Messaging (Google) — only to deliver push notifications: the device token and the notification title and text.
- SMS and messenger providers connected by the company — to send the sign-in code.
Retention
As long as the account exists. In-app notifications are kept for 90 days, the push delivery log for 30 days. After the account is deleted the data is deleted, except for records the company must keep by law (for example, receipts).
Security
Data is transmitted over HTTPS only. The sign-in key is kept in the phone's secure storage (Keychain on iOS, Keystore on Android); passwords are stored on the server only as hashes. Any session can be ended on the website: "Profile → Security".
Account deletion
In the app: clients — "Profile → Delete account"; staff — "More → Delete account". Without the app — follow the instructions at masterclients.pro/delete-account.
Children
The service is intended for businesses and their clients and is not directed to children under 13.
Your rights
You can request access to your data, correct or delete it, and withdraw consent by writing to info@masterkassa.com. Client records in a company's CRM are corrected and deleted by that company; we will help you contact it.
Changes
We publish updated versions of this policy on this page. For material changes we will notify you in the app or by email.