Privacy policy

How Concierra collects, uses and keeps personal data, and what your rights are.

Last updated: 28 September 2026

Who is responsible

The data controller is Sanel Hadžini, an individual based in Belgrade, Serbia, who develops Concierra (concierra.space and concierra.store). Concierra is currently in a free testing phase and is not a registered company.

For any question about your data or to exercise your rights, write to contact@concierra.space.

What we process and why

• Testing sign-up (name, salon name, Instagram profile, salon type, email, phone, message): to contact you about testing. The legal basis is your consent, which you can withdraw at any time.
• Salon account (email, name, salon details, services, prices, hours, photos, settings): to run Concierra for your salon under the Terms.
• Salon clients' data (name, phone, email or Instagram username, messages, requested time and note, visit history and, if the salon runs a loyalty program, the points or stamps balance and a birthday if the client gives it to the salon) sent through a salon page, chat, Instagram or email. The salon is the controller of this data; Concierra processes it only on the salon's behalf and instructions, as a processor.
• Connected accounts: if a salon connects Google Calendar, Gmail or Instagram, we store encrypted access tokens and use them only for the features the salon turns on (adding bookings to the calendar, checking busy times, spotting booking requests in email, replying to messages).
• Technical data (IP address, time and type of request) in server logs, for security and troubleshooting.

AI receptionist

Client messages are processed by an AI model that replies on the salon's behalf using the information the salon entered. The chat always states that an AI is replying, and the AI confirms it honestly when asked. We do not use messages to train AI models, and the AI provider does not use them for training under its API terms.

Google user data

Concierra's use of information received from Google APIs is limited to the features a salon turns on and adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell it, use it for advertising, or share it with third parties other than the service providers listed below.

Cookies and local storage

We only use what the site needs to work, with no analytics or advertising cookies, so no consent banner is needed:

• cs and cas: signing in to the salon app;
• concierra-lang: your language;
• browser local storage: chosen theme, saved salons and a chat conversation id.

Fonts and everything else load from our own servers.

Who receives data

We do not sell data. It is available only to service providers that help run Concierra, and only as far as needed:

• Railway Corp. (hosting and database; servers in the EU, the Netherlands);
• the AI model provider (Anthropic, PBC, or another provider if changed), for AI replies;
• Google and Meta (Instagram), only when a salon connects those accounts;
• an email delivery provider, for notifications and sign-in links.

Some of them are in the USA. Transfers rely on the safeguards these providers offer, such as standard contractual clauses.

How long we keep data

• Testing sign-ups: until testing ends and at most 6 months after, or until you ask us to delete them.
• Salon accounts and client data: while the salon uses Concierra. Salons can delete requests and conversations; after an account is closed we delete its data within 30 days.
• Access tokens: deleted as soon as a salon disconnects Google or Instagram.
• Server logs: briefly, per the hosting provider's settings.

Your rights

You have the right to access, rectify, erase, restrict, port and object to the processing of your data, and to withdraw consent without affecting earlier processing. Send requests to contact@concierra.space; we reply within 30 days. You can also complain to the Serbian Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs).

If you are a client of a salon, contact that salon about your data. You can also write to us and we will pass your request on.

Data deletion

To delete your data, including data received via Instagram or Google, email contact@concierra.space with the subject “Data deletion” and include the email, phone or Instagram profile the data relates to. Salons can also disconnect Instagram or Google in the app under Connections, which deletes the access tokens immediately.

Security

Connections are encrypted (HTTPS), access tokens are stored encrypted, and only Sanel Hadžini has access to the data. No system is perfectly secure; if a breach happens we will inform affected people and the Commissioner where the law requires.

Changes

If we change this policy, we publish the new version here and update the date at the top. We email salons about significant changes.