Privacy policy

Estetix acts in two distinct roles, and the difference matters:

• Salon clients' data (bookings, phone numbers, visit history, chat messages) - the controller is the salon the client is dealing with. Estetix processes this data on the salon's instructions, as a processor.
• Salon account and site visitor data (registration, authentication, marketplace user accounts, technical logs) - the controller is Estetix.

Contact us about anything at info@estetix.ge, or by phone on +995 551 51 11 45.

• Booking data: first name, last name, phone number, chosen service, specialist, date and time of the visit, notes, visit status and price.
• Account data: email, name, phone, salon name and address, role in the system.
• Messenger and Instagram conversations: if the salon has enabled automatic replies, we store the identifier tied to your conversation with their page (PSID), the message text, and whatever you write for the booking yourself (name, phone, preferred service and time). We have no access to your Facebook or Instagram profile, your contacts, or any other conversation.
• Reviews and comments you leave about a salon on the marketplace.
• Technical data: IP address, browser and device type, anonymous page-view statistics, error logs.

We do not collect card details - there are no online payments on the platform. We also do not collect detailed health records; if a salon writes such information into a note, that is the salon's responsibility.

• To create, confirm, remind about and cancel bookings.
• To show the salon its calendar, client base and analytics.
• To answer questions received on Messenger and Instagram and to create bookings from chat.
• For account security and to prevent fraud and abuse.
• To improve the quality of the service (anonymous statistics).
• To meet obligations imposed by law.

Legal bases: performance of the service contract, our and the salon's legitimate interest and, in specific cases, your consent (for example, when you message us on Messenger yourself).

We do not sell data and do not pass it to third parties for advertising. We use the following sub-processors, each only as far as running the service requires:

• The salon you booked with - it sees your booking and contact details.
• Supabase - database and authentication.
• Vercel - site hosting and anonymous web analytics.
• Meta Platforms - Messenger and Instagram Direct, when you message us from there.
• Anthropic - generating automatic chat replies. The message text is processed to compose a reply and is not used to train the model.
• Twilio - visit reminders over WhatsApp.
• Resend - system email (confirmation, password reset).
• Google - only if you sign in to your account with Google.

Some of these services may be located outside Georgia. In those cases we rely on their standard contractual clauses on data protection.

• Messenger and Instagram conversations: 90 days. After that the message text is deleted automatically, and dormant conversations go with it - together with the identifier (PSID) and any contact details given in the chat.
• Bookings and the client record: for as long as the salon has an active account on the platform - this is the salon's working record. The salon can delete it.
• Account data: until the account is closed.
• Deletion request log: we keep only the confirmation code, the date and an irreversible hash of the identifier - never the identifier itself.

You have the right to request a copy of your data, its correction, deletion or restriction of processing, and to withdraw consent you gave earlier. Send your request to info@estetix.ge. We will reply within one month.

If the request concerns a visit recorded at a particular salon, please contact that salon directly - it is the controller of that record. We will help you reach them.

If you talked to an Estetix-powered service from Facebook or Instagram and want that conversation deleted in full, there are two ways:

• Remove the Estetix app in your Facebook settings - Meta then sends us a deletion request automatically and we delete the conversation immediately.
• Or email us at info@estetix.ge.

Detailed instructions and deletion status: the data deletion page.

We use functional cookies only: the authentication session, the chosen theme (light/dark), the interface language and a role hint so you are not asked to sign in on every page. We have no advertising or tracking cookies.

Data travels over an encrypted connection (HTTPS). Each salon's information is isolated at the database level and is unreachable by any other salon. Social network access tokens are stored encrypted. Staff access is granted strictly on a need-to-know basis.

The service is intended for users aged 16 and over. A visit for a minor is booked by a parent or legal guardian.

When we update this policy we change the date shown above. If a change is substantial we notify salons by email.