Privacy Policy
Last updated: July 31, 2026
1. Who we are (Data Controller)
The Data Controller for personal data is IlMioSalone S.r.l., with registered office at Via Example 123, 00100 Roma, Italia, VAT number IT12345678901.
For requests about the processing of your personal data, you can contact us at: privacy@ilmiosalone.it
2. What data we collect
We collect the following categories of personal data:
Staff data (salon users)
- First name, last name, email
- Professional role and skills
- Login credentials (hashed passwords)
- AI communication preferences
- Access and activity logs (for security)
Salon customer data
- First name, last name, phone, email
- Appointment and service history
- Treatment preferences
- Technical notes (for example allergies or style preferences)
Technical data
- IP address
- Browser and device type
- Technical and analytics cookies (see Cookie Policy)
3. How we use your data
Data is processed for the following purposes:
- Service delivery - Appointment management, calendar, customer CRM (legal basis: contract performance)
- Athena AI assistant - Natural language processing for operational support (legal basis: legitimate interest, see section 4)
- Security - Fraud prevention and account protection (legal basis: legitimate interest)
- Service improvement - Anonymized analytics for optimization (legal basis: legitimate interest)
- Communications - Service notifications and appointment reminders (legal basis: contract performance)
4. Artificial intelligence (Athena)
IlMioSalone uses an artificial intelligence assistant called "Athena" to support salon operations.
How Athena works
- Athena processes natural-language messages to assist with appointment, customer, and operational management
- Conversations are processed through OpenAI APIs
- Athena may access salon data (customers, appointments, services) to provide contextual answers
AI transparency (EU AI Act Art. 52)
When you use the management chat, you are communicating with an artificial intelligence system. Athena responses are generated automatically and may not always be accurate. Always verify information for critical decisions.
Data sent to OpenAI
- Conversation text (without customers’ personal identifying data whenever possible)
- Operational context required for responses
OpenAI does not use data sent through APIs to train its models. See: OpenAI API Data Usage Policy
Your AI rights
- You can disable AI conversation storage from Settings
- You can request deletion of conversation history
- You can choose not to use Athena and work manually
5. Sharing with third parties
Your data may be shared with the following service providers (processors):
| Provider | Purpose | Country |
|---|---|---|
| OpenAI | Athena AI processing | USA (SCC) |
| Vercel | Application hosting | EU/USA (SCC) |
| Stripe | Payments | USA (SCC) |
| PostgreSQL (Neon/Supabase) | Database | EU |
SCC = Standard Contractual Clauses for extra-EU transfers
6. Data retention
- Account data: For the full contractual relationship + 10 years (tax obligations)
- Security logs: 180 days
- AI conversations: 6 months (configurable by the user)
- Salon customer data: Managed by the salon (independent controller)
7. Your rights
Under the GDPR (Regulation (EU) 2016/679), you have the following rights:
- Access - Request a copy of your personal data
- Rectification - Correct inaccurate or incomplete data
- Erasure - Request deletion of data ("right to be forgotten")
- Restriction - Restrict processing in certain circumstances
- Portability - Receive data in a structured format
- Objection - Object to processing based on legitimate interest
To exercise these rights, contact us at: privacy@ilmiosalone.it
You also have the right to lodge a complaint with the Italian Data Protection Authority: www.garanteprivacy.it
8. Cookies
For information about cookie use, see our Cookie Policy.
9. Changes to this Privacy Policy
We reserve the right to modify this Privacy Policy. In case of substantial changes, we will notify you by email or in-app notification. We invite you to review this page periodically.
10. Contacts
For questions about this Privacy Policy or the processing of your personal data, contact us:
- Email: privacy@ilmiosalone.it
- Address: Via Example 123, 00100 Roma, Italia