Privacy policy

1. Who we are

Citano is an online service that lets beauty and wellness professionals (“professionals”) receive bookings from their clients and manage their calendar.

Service owner: [name or company name], NIF [NIF], address [address], contact email [contact email].

2. Who is responsible for your data

If you book an appointment with a professional, that professional is the controller of your data. Citano processes your data on the professional’s behalf as a processor, under the data processing agreement included in the terms of use for professionals.

If you are a professional using Citano, the owner of Citano is the controller of your account data.

3. What data we process

About clients who book:

• name, phone, email and language;
• appointments: service, date, time, status, change history and comment to the professional;
• acceptance of this policy and the terms (date and text version);
• the professional’s internal note about the client, which the client does not see and which is never sent to the client.

About professionals:

• name, email and photo from the Google account, phone, address and salon details;
• from the professional’s Google Calendar, only busy time ranges (no event titles or descriptions) and the names of their calendars, so they can choose which ones to take into account (see section 8);
• subscription data: status, payment dates and Stripe identifiers. Card details are processed by Stripe; Citano does not receive them.

Technical data: to protect the booking form from abuse we count attempts per IP address and per phone. They are stored only as an encrypted fingerprint (hash), never in plain form, and deleted within a few hours.

4. Purposes and legal bases

• Handling the appointment and emailing you about it (confirmation, changes, cancellation, confirmation request): performance of the requested service (Art. 6(1)(b) GDPR).
• Providing the service to the professional, syncing their calendar and charging the subscription: performance of a contract (Art. 6(1)(b) GDPR).
• Protecting the service against spam and abuse: legitimate interest (Art. 6(1)(f) GDPR).
• Keeping invoices and payment records: legal obligation (Art. 6(1)(c) GDPR).

We do not send advertising, sell data or build profiles.

5. Who we share data with

Only with providers we need to run the service, under a data processing agreement:

• hosting: [Hetzner Online GmbH, Germany — to be confirmed];
• email delivery: [provider to be confirmed];
• Google (sign-in and the professional’s Google Calendar);
• Stripe (professional’s subscription payments);
• Cloudflare (Turnstile anti-spam check on the booking form).

Data is hosted in the European Union. If a provider processes it outside the EEA, the European Commission’s standard contractual clauses or another GDPR safeguard apply. [Confirm for each provider.]

6. How long we keep data

• Client and appointment data: while the professional keeps their account, or until the professional or the client asks for deletion. When a client is deleted, their appointments are anonymised.
• Professional account data: while the account is active and for [30 days] after it is closed.
• Invoices and payment records: for the period required by law [6 years].
• Anti-abuse counters: a few hours.

7. Your rights

You can request access, rectification, erasure, restriction or portability of your data, or object to its processing.

If you are a client, please contact your professional first; you can also write to us at [contact email] and we will pass it on. If you are a professional, write to us directly.

If you believe we have not handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).

8. Data received from Google

If the professional signs in with Google and connects their calendar, Citano receives from Google only what these features need:

• account name, email and photo: to create the professional’s account and let them sign in;
• a dedicated «Citano» calendar created by the service: appointment events (service, client name and phone, appointment status, salon address and a link to the booking) are created, updated and deleted in it. Citano does not see or change any other calendar;
• the list of the professional’s calendars (names only): so they can choose which ones mark their time as busy;
• busy time ranges of the chosen calendars, without titles, descriptions or attendees: so clients are not offered times when the professional is busy.

This data is used only to provide these features to the professional. It is not used for advertising, not sold and not shared with third parties, except the providers in section 5 as needed to run the service, or when required by law. No one at Citano reads it, except with the professional’s consent, to fix a security issue, or when required by law.

Citano’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

The professional can revoke access at any time in Citano’s «Connections» screen or in their Google Account settings (myaccount.google.com/permissions). We then stop receiving data from Google; when the account is closed, data received from Google is deleted within the period in section 6.

9. Security

The connection is encrypted (HTTPS). Google permissions are stored encrypted. We ask Google for the minimum permissions: Citano cannot read or change the professional’s personal events.

10. Cookies

We use only strictly necessary technical cookies. Details are in the cookie policy.

11. Changes

If we change this policy, we will publish the new version here with its date. Version: draft of 14 October 2026.