Privacy Policy

Last updated: 3 November 2026

1. Data controller

The controller of the Signato platform (the "Service" or "Signato") is:

signato s. r. o.
Registered address: Landererova 7743/8, 811 09 Bratislava - mestská časť Staré Mesto
Company ID: 57637105
Registration: Obchodný register Mestského súdu Bratislava III, oddiel Sro, vložka č. 199766/B
E-mail: privacy@signato.sk

(hereafter "Controller", "we" or "us")

2. Two processing roles

Signato operates in two distinct roles depending on the processing context:

1. As controller — for the purposes of providing the Service to our customers (beauty salons, PMU studios). We process personal data of account users (salon owners, employees).
2. As processor — for personal data of salon clients processed during questionnaires and e-signatures. In this case the salon itself is the controller. Signato only processes the data technically on its behalf.

3. What data we process (as controller)

When you register and use a Signato account, we process:

Sign in with Apple or Google. You can sign in to, or sign up for, your account without a password through either of them. The provider sends us only your account identifier, your e-mail address (and whether it has verified it) and your name; Google also sends the profile photo. Apple lets you hide your e-mail – in that case we receive a random @privaterelay.appleid.com address and Apple forwards our messages (e.g. booking notifications) to you. Apple sends us your name only the first time you sign in. We never see your Apple or Google password. If you sign in with Apple or Google to an account that already exists with the same verified e-mail, the two sign-in methods are linked; we record the link in the audit log. When signing up, you confirm the terms, this policy and the data processing agreement before being redirected; the record of consent contains the time, IP address and browser. The sign-in itself at Apple or Google is governed by their own policies.

3a. Google Calendar connection

The connection is optional and available to salon owners and staff whose salon has the booking module. Once connected, Signato creates a separate calendar called "Signato – termíny" in your Google account and writes the salon's appointments into it, from yesterday up to one year ahead, both confirmed and pending (pending ones carry "(čaká na potvrdenie)" in the title).

What we write to Google:

• start and end time of the appointment and the salon's time zone;
• service name and the client's first and last name (or "Bez klientky" when the appointment has no client);
• name of the staff member and the add-ons ordered;
• a link back to the calendar in Signato.

In the connection settings you can turn on hiding client names – only the service name and the staff member's name are then written to Google. You can also write only your own appointments. We do not write the client's phone or e-mail, client notes, internal notes, questionnaire answers or any health data. Appointments of a client who has requested restriction of processing (Art. 18 GDPR) are not written to Google. Cancelled appointments are removed from the calendar; past appointments stay in it as history until you disconnect.

What we receive from Google: the e-mail address of the connected Google account and access tokens (refresh and short-lived), stored encrypted. We request only the scopes "openid", "email" and "create calendars and manage their events" (calendar.app.created). The last one allows working only with the calendar Signato itself created – we read nothing from your other calendars or events and have no access to them. We do not pass data from Google APIs to anyone else and use it for nothing other than writing appointments to your calendar.

Roles. Data about the connection (Google account e-mail, tokens, your settings) is processed by us as controller to perform the contract (Art. 6(1)(b) GDPR). Appointments and client names are written to Google as processor on the instructions of the salon, which is their controller. Google then processes the calendar and its content in your Google account under its own terms.

Disconnecting. You can cancel the connection at any time in Signato (Calendar → In my calendar → Google Calendar → Disconnect) or in your Google account settings (third-party app access). After you disconnect in Signato we try to delete the "Signato – termíny" calendar from your Google account, revoke the permission at Google and delete the stored tokens. If Google does not respond at that moment, the disconnection still completes in Signato and you can delete the calendar manually in Google. The same happens when your account or the salon's account is deleted. If the salon loses the booking module or an active subscription, or you stop being a team member with access to bookings, we also remove the calendar from your Google account; the connection stays and the calendar is restored once the conditions apply again. If you revoke the permission in your Google account, writing stops and we delete the stored tokens.

Signato's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Recipient: Google Ireland Limited (Ireland; parent Google LLC, USA) – only for users who have connected Google Calendar.

4. Salon clients' data (processor role)

If you are a client of a salon that uses Signato for questionnaires and consent: the controller of your data is that salon, not Signato. Please direct access, correction and erasure requests to the salon where you filled the form.

Signato only processes your data based on the salon's instructions and under a data processing agreement (DPA). Data is stored on servers in the EU – the application server is in Finland, backups are in Germany (Hetzner Online GmbH), encrypted in transit and at rest.

4a. Online bookings and the client area (processor role)

If you book an appointment with a salon through its booking page (/book/…, or on the salon's own domain), the controller of your data is the salon, not Signato. Signato provides the booking technically on the salon's behalf under a data processing agreement (Art. 28 GDPR). Please direct access, correction and erasure requests to the salon or through the /dsar form.

What you enter when booking:

• first name, last name, e-mail and phone (required);
• an optional note to the booking (max. 1,000 characters), stored encrypted – please do not write health data in the note; the health questionnaire is filled in separately;
• the chosen service, staff member, add-ons and time;
• a required consent to the processing of your contact data for handling the booking. On submission we store the wording of the consent, the time, IP address (encrypted) and browser as proof of consent.

The form is protected by Google reCAPTCHA v3 (Google Ireland Limited). For the salon, the legal basis is handling your booking (performance of a contract, Art. 6(1)(b) GDPR) and the consent above; the exact legal basis and retention period are set by the salon.

Messages you receive. Sent from the Signato platform address on behalf of the salon (the salon's name appears as sender, replies go to the salon):

• booking confirmation with a personal link to manage it (cancel, reschedule, .ics calendar); the link stops working 60 days after the appointment;
• reminders 24 hours and 2 hours before a confirmed appointment;
• notice of cancellation or rescheduling;
• a link to fill in the health questionnaire – usually 2 days before the appointment, valid until one day after it;
• a "time for a touch-up" message (only for a service where the salon set a touch-up) and a follow-up after the visit (on the Profesionál plan); neither is sent to a client who opted out of marketing messages.

If you have requested restriction of processing (Art. 18 GDPR), we do not send these messages. A log of e-mails sent (recipient, subject, status, no message body) is kept for 90 days.

Deposit. If the salon requires a deposit, you pay it by card on the Stripe Checkout page. The payment goes directly to the salon's Stripe account (Stripe Connect, or the salon's own Stripe keys entered in Signato); Signato does not receive or hold the deposit and, while this policy is in effect, charges no commission for it. You enter your card data directly with Stripe and Signato does not receive it. From us Stripe receives the service name, the salon name, the amount and internal booking and salon numbers; we do not send it your name or e-mail. We store the amount, payment status and payment identifiers. An unpaid booking is released after about 30 minutes.

My visits. On /moje you can have a link sent to the e-mail the salon has on file for you. The link is valid for 24 hours and shows only appointments (date, service, staff member, status), links to manage them and the balance of packages; never questionnaires, photos, signatures or notes. We respond in the same way whether or not we know the e-mail. The IP address of the request is stored when the link is created; expired links are deleted daily.

5. Recipients of data

We may share your data with the following recipients:

• Hetzner Online GmbH (Germany; server in Finland, backups in Germany) — server hosting and backups
• Stripe, Inc. (USA, Ireland) — subscription payment processing (under SCC); booking deposits are paid by the client directly to the salon's Stripe account (Stripe Connect)
• Websupport s.r.o. (SK) — domain and @signato.sk mailboxes
• Resend, Inc. (USA; e-mails are processed in the EU, data centre in Ireland) — sending e-mails from the app (account verification, booking confirmations and reminders, questionnaires; under SCC)
• Google LLC (USA, Ireland) — reCAPTCHA (anonymised, public questionnaire only) and Google Sign-In (only if the user signs in via Google: name, email, profile photo); optional Google Calendar connection (section 3a)
• Apple Distribution International Ltd. (Ireland, parent Apple Inc. USA) — only if you sign in or sign up with Apple (account identifier, e-mail or hidden address, name)
• Sentry.io — technical error monitoring (pseudonymised)
• Tax and financial authorities where required by law

6. Your rights

Under GDPR you have the right to:

• Access your data (Art. 15)
• Rectification of inaccurate data (Art. 16)
• Erasure ("right to be forgotten") (Art. 17)
• Restriction of processing (Art. 18)
• Portability (Art. 20)
• Object to processing based on legitimate interest (Art. 21)
• Withdraw consent — where processing is consent-based
• Lodge a complaint with the Slovak Data Protection Authority

Send requests to podpora@signato.sk. We will respond within 30 days of receipt.

7. Security

We implement appropriate technical and organisational measures to protect your data:

• TLS 1.2+ encryption for all connections
• Password hashing (bcrypt), HSTS, CSP headers
• Regular backups and access auditing
• Tenant data isolation (multi-tenant separation)
• Production data access limited to authorised staff

8. Cookies

We use strictly necessary cookies for sign-in and bot protection. See our separate Cookie Policy for details.

9. Changes to this policy

We reserve the right to update this policy. We will notify you of material changes by e-mail or through the Service at least 14 days before they take effect.

10. Contact

For privacy questions contact us at:
E-mail: podpora@signato.sk