Privacy Policy

A barbershop is the controller of its clients' data: it decides whom to register, what to record and for how long to keep it. The BarberShopSystem is the processor: it processes this data to perform the contracted service, following its instructions.

For the barbershop's own data, company registration, login, billing, subscription, BarberShopSystem is the controller.

From the barbershop: company name, CNPJ, address, phone, email, access data and subscription data. Payments are processed by Stripe; full card data never passes through our servers and is not stored by us.

From the barbershop's end client: name, phone and, when provided, email; service history, preferences the barbershop records, reviews and NPS answers; and, if the barbershop uses the Attendant, the content of the messages the client sends to its WhatsApp.

We don't keep the text of the messages we send, nor photos or videos. When the platform sends a reminder, a confirmation or a campaign on the barbershop's behalf, the text is deleted the instant the message goes out: only the record that it went out is kept, to whom, when, through which channel and whether it was delivered. The same applies at the WhatsApp gateway, and image, audio and video are never even recorded. Both rules are enforced by the database, not by configuration: neither a system update nor a manual command can record this content again.

We never collect biometric data. There is no facial recognition or biometric template in any part of the system; it's an architecture decision, not a setting.

If the barbershop turns on the Assistant, the text of the message received is sent to the model provider for the sole purpose of writing a reply. This content is not used to train models and is not shared with other barbershops.

Every reply written by AI reaches the recipient marked as written by artificial intelligence, with an indication of how to talk to a person. The marking is applied by the server when sending and cannot be turned off.

We keep a record of each generation: date and time, model, source message and text produced, for audit and to answer data-subject requests. This record is accessible only to the barbershop that owns the data and to our technical team, and is deleted automatically after 3 days: it's an audit period, not a conversation archive. The usage record that supports billing is separate and survives the purge; deleting it would delete the proof of how much was charged.

No decision with legal effect or relevant impact is made automatically by AI. It drafts text and proposes; booking, canceling and rescheduling are carried out by deterministic code under the barbershop's rules.

• Contract performance: operating the schedule, register, tabs and billing.
• Legitimate interest: security, fraud prevention and service improvement, always with the minimum data necessary.
• Consent: non-essential cookies, marketing messages and use of the Assistant, all with affirmative action, none pre-checked, all revocable.
• Legal obligation: keeping tax and accounting records.

Only with the operators needed to run it: payment processor (Stripe), messaging provider (WhatsApp), AI model provider, hosting infrastructure and image storage. We do not sell personal data.

In the regional comparison, a barbershop's numbers only appear aggregated in groups of five or more shops. No data derived from one barbershop's clients goes to another, and participation can be ended on the screen itself.

Access is by role and enforced by the server, not just hidden on the screen. A barber sees their own appointments, their own commission and their own products sold, never the shop's revenue, never a colleague's name or number. The front desk sees schedule, register and client records, not finance.

Client data is kept as long as the barbershop keeps the account active and the client's record. Tax records follow the legal period. Once the account is closed, data is deleted or anonymized, except what the law requires to be kept.

Messages have their own, short retention, because a conversation is not a record:

• Text of what we send: deleted on sending; it never even has a retention period.
• Sending record (recipient, date, channel, delivery): 60 days. Reactivation messages are kept 90, because that mark is what prevents the same client from being approached twice in the quarter; deleting it earlier would break the promise it exists to keep.
• Message content at the WhatsApp gateway: is not stored. Image, audio and video, never.
• Messages received, when the barbershop turns on the Assistant: 90 days, and the AI's draft about them, 3 days.

These periods run on their own, in an automatic routine; they don't depend on someone remembering to clean up.

The LGPD guarantees confirmation of processing, access, correction, anonymization, portability, information about sharing, withdrawal of consent and deletion. The end client exercises these rights with the barbershop, which is the controller; the platform provides the necessary technical support.

Requests addressed directly to us can be sent to the contact in the footer of this page and are answered within the legal deadline.

We use essential cookies (session and security), which don't depend on consent, and non-essential cookies, which do. The choice can be reviewed at any time in Your privacy options, at the bottom of the home page.

We use encryption in transit, per-barbershop isolation in the database, role-based access control and logging of sensitive operations. In the event of an incident with relevant risk, we notify the affected controllers and the ANPD under the terms of the law.