galateaAI Assistant
Language: English; Region: Canada

This booking system only uses cookies it strictly needs to work: the login (session) cookie keeps you logged in, and the language, currency, region and appearance cookies remember the language, currency, country or look (day or evening) you choose. It sets no third-party cookies for marketing or statistics. Privacy notice

Your data

Data security

We know how much it matters that your data is safe. Here is, in plain words, what we store, where we store it and who can see it.

Our promises

  • We never sell your data

    We don’t sell your personal data, and we don’t share it with anyone for advertising or marketing.

  • Your booking goes only to your salon

    Your name, contact details and appointment go only to the salon you book with, because it needs them to serve you.

  • Only contracted providers

    A few carefully chosen service providers (hosting, email delivery, telephony) help us run the service. They may use your data only on our instructions and under contract, never for their own purposes.

  • No passwords to steal

    You sign in with a one-time six-digit code sent to your email address. We don’t store passwords.

  • You stay in control

    You can ask at any time what data we hold about you, and have it corrected or deleted.

Where your data is stored

Wherever you are, your account, your bookings, the client book and the photos are stored in one place: in the European Union, in a data centre in Frankfurt, Germany. The website itself runs in Frankfurt too.

Your data is storedIn the EU (Frankfurt)

  • United States, Canada and Puerto Rico

    Your region

    Although you are outside Europe, your data is stored in the EU and protected exactly as it is for our European users. For a faster line, calls to salons with US phone numbers are planned to be processed in the United States. We’ll update this page before that starts.

    • Your data is storedIn the EU (Frankfurt)
    • AI phone assistant callsIn the United States (planned)

  • European Union and EEA

    All EU countries (including Hungary), Iceland, Liechtenstein and Norway

    • Your data is storedIn the EU (Frankfurt)
    • AI phone assistant callsIn the EU (planned)

  • United Kingdom

    • Your data is storedIn the EU (Frankfurt)
    • AI phone assistant callsIn the EU (planned)

  • Latin America

    Mexico, Dominican Republic, El Salvador, Argentina, Brazil

    • Your data is storedIn the EU (Frankfurt)
    • AI phone assistant callsIn the EU (planned)

  • Israel

    • Your data is storedIn the EU (Frankfurt)
    • AI phone assistant callsIn the EU (planned)

  • All other countries

    • Your data is storedIn the EU (Frankfurt)
    • AI phone assistant callsIn the EU (planned)

The AI phone assistant hasn’t launched yet: the table shows where its calls are planned to be processed. We’ll update this page before it starts.

Good to know

Scalp analysis
At hair salons that offer it, and only with your consent, the scalp analysis sends the photos, without your name or email address, to our AI provider, Anthropic, in the United States. The photos and the result are stored in the EU.
Emails
Login codes, confirmations and reminders are delivered by our email service provider, which uses them for nothing else.
Card payments
We never see or store card numbers: card payments are handled by Stripe.

How we protect it

  • Every connection is encrypted (HTTPS).
  • In the database, everyone can see only their own data: access is checked for every single table.
  • Photos are stored privately and are shown only through short-lived links (valid for an hour at most).
  • Location and device data are removed from every uploaded photo.
  • Sensitive keys, such as those of invoicing programs, are kept in an encrypted vault.
  • What we no longer need is deleted automatically: login codes within a day, booking photos 30 days after the booking is closed, call transcripts not linked to a client after 90 days.
  • No tracking: no advertising or analytics cookies, and no third-party trackers.

Your rights

You can ask at any time what data we hold about you, have it corrected, or ask us to delete it. Write to us and we’ll reply by email.

Contact usPrivacy notice

This page is a summary in plain words. The legally binding details are in our Privacy notice.