Who we are
Agendessa is a product of SYNTRANOVA AL LTD, a company registered in Cyprus under number HE 485824, with its registered office at Nikis 1, Anthoupoli, 2350 Nicosia, Cyprus (“Syntranova”, “we”, “us”). We are the controller of the data described below. You can always write to us at office@agendessa.com.
What this policy covers
This policy applies to agendessa.com, your account in the app at app.agendessa.com and the messages you send us. The data of your salon's clients (appointments, records, photos, forms, messages) belongs to the salon: the salon is the controller and we process it only on its behalf, under the Data Processing Agreement.
What we collect
- Your account. Your name, email, phone, password (stored only in hashed form), business name, country, billing details and account settings.
- Use of the app. What you set up and enter in the app, and access logs (IP address, browser, time) for security.
- Messages to us. Anything you write to us by email or through forms.
- The website. Short-lived technical logs and, only if you click “Accept”, Google Analytics statistics (see the Cookie policy).
Why we use it, and on what basis
- To provide the service, sign you in and send your account emails: performance of the contract (Art. 6(1)(b) GDPR).
- Billing and accounting: legal obligation (Art. 6(1)(c)).
- Security, abuse prevention and improving the service: our legitimate interest (Art. 6(1)(f)).
- Google Analytics and news about Agendessa: your consent (Art. 6(1)(a)), which you can withdraw at any time.
Who receives it
We do not sell personal data. We use it only with providers working on our behalf under contract:
- Hetzner Online GmbH, Germany: the servers Agendessa runs on.
- Sendinblue SAS (Brevo), France: sending automatic emails.
- Migadu, Switzerland: our mailboxes.
- Google Ireland Limited: Google Analytics on the website, only with your consent.
- OpenAI and ElevenLabs: only if the salon switches on the AI receptionist, to understand messages and calls and to answer.
- Meta Platforms (WhatsApp, Instagram, Facebook): only if the salon connects these channels.
- Stripe: only if the salon connects its own Stripe account. Payments go straight to the salon; Agendessa does not receive the salon's money.
Transfers outside the EU
Data is hosted in the European Union, in Germany. Some providers (for example OpenAI, ElevenLabs, Meta, Google) may process data in the United States. These transfers are protected by the European Commission's Standard Contractual Clauses or the EU and US Data Privacy Framework, as applicable.
How long we keep it
- Account data: while the account is active, then deleted or anonymised, except what the law requires us to keep (for example accounting records).
- Salon data: until the account is closed, with the option to export it first.
- Server logs: normally no longer than 90 days.
- Backups: rotated automatically and overwritten over time.
- Google Analytics: the cookies expire after 13 months.
Your rights
You have the right of access, rectification, erasure, restriction, portability, objection, and to withdraw consent at any time. Write to office@agendessa.com; we answer within one month. You can complain to the Commissioner for Personal Data Protection in Cyprus (dataprotection.gov.cy) or to the data protection authority where you live.
Security
We use encryption in transit, hashed passwords, role based access, separation of each business's data and providers chosen for their security.
Changes
We may update this policy when the service changes. The date at the top shows the latest version. We tell you about important changes by email.