Legal
Privacy policy
Last updated: May 13, 2026
At Citála we take privacy seriously. This policy explains what data we collect, how we use it and what your rights are.
1. Who we are
Citála is appointment management software for beauty salons (hereinafter "Citála", "we" or "the company"). Our contact address is hola@citala.lat.
2. Data we collect
We collect the data you provide directly when creating an account or using our services: • Account data: name, email, password (stored encrypted), business name, phone. • Business data: salon name, services, prices, hours, staff information. • Salon client data: name and phone of the people who book through the public booking page. • Usage data: pages visited, actions taken, date and time of access. • Payment data: processed directly by our payment provider (N1CO). Citála does not store card numbers.
3. How we use your data
We use your data to: • Provide, operate and improve the Citála service. • Send appointment confirmations and reminders to the salon’s end clients. • Communicate product updates, changes to the terms or security notices. • Comply with the legal and tax obligations that apply in your country. We do not sell your data to third parties or use it for third-party advertising.
4. Data sharing
We share data only with the following third parties, strictly necessary to operate the service: • Resend: transactional email delivery (confirmations, password recovery). • N1CO: payment processing. • Contabo: server and database infrastructure. All providers are bound by data processing agreements compatible with the applicable privacy laws.
5. Security
We implement technical and organizational security measures to protect your data: • Encrypted communications over TLS/HTTPS. • Passwords stored with bcrypt hashing. • Short-lived JWT access tokens with refresh token rotation. • Network-restricted database access. No system is 100% secure. If you find a vulnerability, contact us at seguridad@citala.lat.
6. Data retention
We keep your data while your account is active. If you cancel your subscription, we keep your data for 30 days to allow reactivation. After that period, the data is permanently deleted. End-client data (name and phone of people who booked appointments) is deleted together with the business data.
7. Your rights
Depending on your jurisdiction, you may have the following rights: • Access: request a copy of your data. • Correction: fix incorrect data. • Deletion: ask us to erase your data. • Portability: receive your data in an exportable format. To exercise any of these rights, write to us at hola@citala.lat.
8. Cookies
Citála uses only the cookies essential for the service to work (user session). We do not use advertising tracking cookies or social media cookies.
9. Changes to this policy
We may update this policy from time to time. If the changes are significant, we will notify you by email at least 7 days before they take effect.
10. Contact
For any privacy question, write to us at hola@citala.lat or on WhatsApp at +503 7292-0427.