Privacy Policy

Last updated: August 16, 2026

StudioSide ("we") provides beauty studios with a receptionist and messaging service powered by a virtual assistant that handles client conversations and manages appointment bookings. This policy explains what data we process, for what purpose, and what rights you have.

Controller and processor

When you message a beauty studio that uses StudioSide, the studio is the controller of your data and StudioSide acts as processor on the studio's behalf. For all other data (for example, the contact details of the studios themselves), StudioSide is the controller.

Contact: marcus@mystudioside.com

What data we process

  • Contact details: name, phone number, Instagram username.
  • Messages: the content of the conversations you have with the studio on WhatsApp or Instagram, including transcripts of voice notes.
  • Booking data: requested service, appointment date and time, appointment history.
  • Photos: if you send a photo so a service can be assessed (for example, a brow touch-up), it is used only for that assessment.
  • Technical data: messaging identifiers (for example, your Instagram user ID or WhatsApp number) needed to deliver the messages.

Data received from Instagram and WhatsApp

We receive messages through Meta's platforms (the Instagram API and, via Twilio, the WhatsApp Business API). From Instagram we process: your user ID, your username, and the content of the messages you send to the studio. We do not store the media files received through Instagram: they are processed (for example, to transcribe a voice note) and then discarded. We do not sell data and we do not use it for advertising.

Purposes and legal basis

  • Answering your questions and managing your bookings (pre-contractual steps or performance of the service contract with the studio).
  • Sending you appointment confirmations and reminders (the studio's legitimate interest in managing appointments).
  • Improving service quality and reviewing the virtual assistant's conversations (legitimate interest).

Conversations may be handled by an automated virtual assistant; studio staff can step in at any time.

Recipients

We use providers that process data on our behalf under appropriate safeguards: Meta Platforms (Instagram and WhatsApp), Twilio (messaging), OpenAI (language processing for the assistant), and cloud hosting providers. We do not share your data with third parties for their own purposes.

Retention

We keep conversations and booking data for as long as the relationship with the studio lasts and for the applicable legal periods. You can request erasure at any time (see "Data deletion").

Your rights

You have the right of access, rectification, erasure, objection, restriction and portability. Write to us at marcus@mystudioside.com or contact the studio directly. You can also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Data deletion

See the instructions on our Data deletion page.