Privacy Policy

This Privacy Policy explains how MERS Corporation ("MERS", "we", "us") collects, uses, stores, and protects information when you use the MERS platform — our salon and service-business management software, available at app.mers.ph, our websites, and related apps and integrations (together, the "Service").

By using MERS, you agree to the practices described here. If you do not agree, please do not use the Service.

1. Who this applies to

MERS is used by businesses (salons and service businesses — our "customers") and the people who work at or transact with those businesses (owners, staff, and clients). This policy covers information handled through the Service, whether you are a business using MERS or an individual whose information a business records in MERS.

2. Information we collect

We collect information you or your business provide, and information generated as you use the Service:

Account & business information

• Business details (salon name, branches, address, region).
• User accounts — names, email addresses, roles, and contact numbers of owners and staff.
• Sign-in information when you log in with Google (we receive your name, email, and a Google account identifier to authenticate you).

Business & operational data

• Client records a business chooses to store (names, contact details, visit history, notes).
• Appointments and bookings, sales and transactions, inventory, suppliers, expenses, staff attendance, and payroll information that the business enters or generates.
• Photos a business uploads (for example, before-and-after service photos) and receipt images or documents.

Payment information

• When payments are processed, they are handled by our payment provider (HitPay). MERS does not store full card or bank details; we retain records of transaction amounts, methods, and status for your business's reporting.

Technical information

• Basic technical data needed to operate the Service securely (for example, log data and device/browser information).

3. Google account data (Drive)

Connecting Google Drive is optional and controlled by your business. When connected:

• Files you choose to upload through MERS (photos, receipts) are stored in your business's own Google Drive — they remain your property, in your account, on your storage.
• MERS stores only a secure reference (a link and file identifier) so it can display those files back to authorized users inside MERS.
• You can disconnect Google Drive at any time from within MERS, which revokes MERS's access. Files already in your Drive remain in your Drive unless you delete them.

MERS's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, and we do not sell it.

4. How we use information

We use information to:

• Provide, operate, and maintain the Service for your business.
• Authenticate users and secure accounts.
• Process and record transactions, bookings, payroll, and reporting.
• Send service-related communications (for example, booking confirmations, receipts, and product notifications).
• Provide support, improve the Service, and keep it secure and reliable.
• Comply with legal and regulatory obligations.

5. How information is shared

We do not sell your personal information. We share information only as needed to run the Service:

• Within your business. Data entered in MERS is available to authorized users of that business according to their roles and permissions.
• Service providers who help us operate MERS — for example, our hosting and database provider (Supabase), payment processor (HitPay), email provider (Resend), and Google (for sign-in and Drive, when you connect it). These providers process data on our behalf under their own terms.
• Legal reasons — if required by law, regulation, or valid legal process, or to protect the rights, safety, and security of MERS, our users, or the public.

Cookies and the Meta Pixel

On our public marketing and sign-up pages (web.mers.ph and the app.mers.ph sign-up flow) we use the Meta Pixel, a tool from Meta Platforms, Inc. (Facebook/Instagram), to measure how well our advertising works — for example, how many people who arrive from an ad go on to start a free trial.

The pixel loads only if you accept it in the cookie banner shown on those pages. If you accept, it sets cookies in your browser, including _fbp and _fbc, used to attribute a visit or sign-up to an ad. We do not load it inside the logged-in app or on salon booking pages, and it never receives the details you type into forms (such as your name or email).

MERS may also send this same measurement data to Meta from our servers (event IDs, browser identifiers, IP address and device info), only after you accept. When you sign up, and later when your account becomes active, the pixel and our servers also send a hashed MERS account ID as a stable match key (never your name, email or phone number), so Meta can connect those events to the ad without any contact details.

How to decline: choose "Don't accept" on the cookie banner. If you decline on web.mers.ph, the sign-up page on app.mers.ph asks you once more; whatever you answer there, we don't ask again (a mers_meta_reasked cookie remembers that you were asked). You can also change your choice later by clearing the mers_meta_consent cookie for our site, or by blocking cookies in your browser settings. Declining does not affect your ability to sign up or use MERS.

6. Where information is stored

Your business's operational data is stored securely with our infrastructure provider. Files you upload through the Google Drive integration are stored in your own Google Drive, not on MERS's servers. We apply reasonable technical and organizational measures to protect information, including encryption of sensitive credentials at rest and access controls that limit data to authorized users of each business.

7. Data retention

We retain business and personal data for as long as your business maintains its account and as needed to provide the Service, resolve disputes, and meet legal obligations. A business can request deletion of its data by contacting us. Files stored in your own Google Drive are retained and controlled entirely by you.

8. Your choices & rights

• You can access and update much of your information directly within MERS.
• You can connect or disconnect Google Drive at any time.
• You may request a copy or deletion of personal data, subject to applicable law and the business's own records, by contacting us.
• Businesses are responsible for handling the personal data of their own clients and staff lawfully, including obtaining any consents required.

9. Children

MERS is a business tool and is not directed to children. We do not knowingly collect personal information from children except where a business records limited client details in the ordinary course of its services, for which that business is responsible.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify users within the Service. Continued use of MERS after changes take effect constitutes acceptance of the updated policy.

11. Contact us

If you have questions about this Privacy Policy or how your information is handled, contact us:

---

This policy describes MERS's current data practices in good faith and in plain language. It is provided for transparency and does not constitute legal advice.