← Back to BTR
Privacy Policy
Effective: March 26, 2025
Data Controller
MVP Forge Ltd. (EM VI PI FORGE OOD)
UIC: 208234110
VAT: BG208234110
22 Gen. Ivan Kolev St., fl. 3, apt. 5, Krastova Vada, Lozenets, Sofia 1407, Bulgaria
1. Data We Collect
We collect the following categories of personal data:
- Account information: name, email address, phone number, profile photo
- Third-party authentication (Google OAuth): When you sign in with Google, we access your email address, name, and profile photo. These are used solely to create and authenticate your BTR account. Google's privacy policy governs Google's handling of your data.
- Booking data: appointment history, service preferences, salon interactions
- Location data: approximate location for finding nearby salons (with your consent)
- Device data: device type, operating system, browser type for app optimization
- Usage data: how you interact with the app to improve our services
2. How We Use Your Data
We use your personal data to:
- Provide and maintain the BTR booking platform
- Process and manage your salon appointments
- Send booking confirmations, reminders, and updates
- Improve and personalize your experience
- Show relevant salons and services based on your location
- Communicate important service updates
- Ensure platform safety and prevent fraud
3. Data Sharing
We share your data only as necessary:
- With Google (for authentication and sign-in purposes only)
- With salon owners and staff to fulfill your bookings
- With payment processors to handle transactions
- With Supabase (our infrastructure provider) for data hosting
- With authorities when required by Bulgarian or EU law
We never sell your personal data to third parties.
4. Cookies & Local Storage
We use essential cookies and local storage to:
- Keep you signed in to your account
- Remember your preferences and settings
- Ensure the app functions correctly
We do not use third-party tracking or advertising cookies.
5. Data Retention
We retain your personal data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law (e.g., financial records under Bulgarian accounting regulations).
6. Your Rights (GDPR)
Under the EU General Data Protection Regulation (GDPR), you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase your data (right to be forgotten)
- Restrict processing of your data
- Data portability
- Object to processing
- Withdraw consent at any time
You can revoke BTR's access to your Google account at any time through your Google Account settings. This will not affect your ability to manage data you've already provided to BTR directly.
To exercise other data rights, contact us at privacy@mvpforge.com.
7. Children's Privacy
BTR is not intended for users under 16 years of age. We do not knowingly collect personal data from children. If we learn that we have collected data from a child under 16, we will delete it promptly.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or via email. Continued use of BTR after changes constitutes acceptance of the updated policy.
9. Contact Us
MVP Forge Ltd.
22 Gen. Ivan Kolev St., fl. 3, apt. 5
Krastova Vada, Lozenets, Sofia 1407, Bulgaria
Email: privacy@mvpforge.com