1.Who we are and how to reach us
BlissfulBookings is a booking platform for beauty and wellness salons. It is operated by OĂ Blissful Living, an Estonian company, which is responsible for the processing described in this policy.
Oà Blissful Living · registry code 17442593
Registered office: Falgi tee 6-4, 10137 Tallinn, Estonia
Salon and postal address: Tartu maantee 52, 10115 Tallinn, Estonia
E-mail: info@blisse.ee · Phone: +372 515 1566
App Store publisher and contact person: Juhan Kuuskemaa
Write to info@blisse.ee about anything to do with this policy or your personal data. The iOS app âBlissfulBookings for Businessâ is published on the App Store by Juhan Kuuskemaa on behalf of OĂ Blissful Living.
2.Who this policy is for
BlissfulBookings touches four groups of people. Each part of this policy says which group it concerns.
- Staff users â owners, managers and staff who sign in to the back-office at blissfulbookings.com/portal or to the app with an account their salon created. For your account data, device tokens and consent records we are the controller.
- Salons â the business that subscribes to BlissfulBookings. For your clientsâ data we act as your processor: we store and process it on your instructions and under our service terms, and you decide what is recorded and for how long.
- Salon clients â people who book, chat or receive messages through a salon that uses BlissfulBookings. Your salon is the controller of your data; we process it on the salonâs behalf. Please contact the salon first about your data â we help every salon answer such requests.
- Website visitors â people who browse the public pages of blissfulbookings.com or a salonâs booking page.
3.What we process and why
3.1Staff accounts
Your account is created by your salonâs owner or manager; there is no self-registration in the app. We store your name, your login e-mail address, a bcrypt hash of your password (we never store the password itself), your role (owner, administrator or staff) and, if your salon uses the Hours (Töötunnid) feature, the hourly rate the owner has entered for you. When you sign in we set a session cookie named blisse_tenant (httpOnly, valid for 7 days) that ties your browser or app to your account and salon, and a cookie that remembers your interface language.
Purpose: letting you sign in, see your schedule and do your work in the salonâs account.
3.2Push notifications
If you allow notifications in the app, we store the device token that Firebase Cloud Messaging (Google) or Apple issues for your device, the platform (iOS or Android) and when it was last seen, linked to your account. The token is deleted when you log out and removed when the delivery service reports it as invalid.
The notification text itself can contain personal data about the salonâs clients: for a booking, the clientâs name and phone number, the service, time, room, staff member and booking note; for a chat, the visitorâs name, phone number or e-mail address. This text passes through Googleâs and Appleâs push services on its way to your device. The Firebase SDK also keeps an app-installation identifier so that notifications can be delivered.
You can switch notifications off at any time in the app (More â notifications) or in your phoneâs settings (iOS: Settings â Notifications).
3.3Bookings and client records â on the salon's behalf
This is the salonâs data; we process it as the salonâs processor. It includes bookings (client name, e-mail address, phone number, service, time, staff member, note), client cards (name, contact details, gender, country of residence or origin, tags and notes written by staff), shift and roster data, invoices and point-of-sale records (the payment method only â card, cash or similar; we never store card numbers) and booking history the owner imports from a previous system, for example as a CSV export. Staff of that salon see these records according to their role.
3.4Chat and AI replies
A salon can offer a live chat on its website. Visitor messages and staff replies are stored under the salonâs account so the whole team can follow a conversation. To answer quickly and in the visitorâs language, messages and replies are sent to OpenAI (USA): it drafts automatic replies, detects the visitorâs language and translates between the visitor and the staff member. The salonâs own website texts are also converted into âembeddingsâ with OpenAI so that the assistant knows the salonâs services and opening hours. The salonâs owner can switch the automatic AI replies off at any time in the chat settings.
If you are a staff member: your chat replies are processed by OpenAI for translation and, while the assistant is on, to inform its suggested answers. If you are a visitor: the chat window tells you that replies may be automated.
3.5Chat visitor context
When a salon turns on visitor context for its chat, the staff member answering sees, next to the conversation, roughly where the visitor is (city, region and country, derived from the IP address by our hosting providerâs network â the IP address itself is not stored for this), which site referred them, which pages of the salonâs own website they have visited, how long they have been on the site and their time zone. The salon uses this to answer in context; we process it on the salonâs behalf. It concerns the salonâs website visitors, not the app user.
3.6Marketing campaign drafts â owners only
When an owner asks for a campaign text in Marketing, we send the salonâs name, its âaboutâ description and the ownerâs own brief (goal, tone, offer) to Google Gemini (USA), which returns a draft. No client or staff personal data is included. An owner can also upload a background image for a campaign; because campaign images are meant to be published, they are stored in a storage bucket that is readable by anyone who has the imageâs address.
3.7Analytics and cookies
The app and the back-office contain no advertising or tracking technologies. We measure usage and loading performance with Vercel Web Analytics and Speed Insights, which record the page address, referrer, country/region/city, browser, operating system and device type for each page view â without cookies and without identifying you. The temporary hash Vercel uses to count a visit is discarded within 24 hours.
The only cookies we set are the ones needed to run the service: the session cookie (3.1) and the cookies that remember your language choice.
Website cookies: the public marketing pages of blissfulbookings.com may additionally load Google Ads and Google Analytics tags to measure our own advertising. These tags are not loaded in the app or in the back-office.
3.8Consent records
When you give a consent inside the product â for example when an owner publishes a website gallery with photos taken from the salonâs social-media accounts, or accepts our terms when signing the salon up â we record the time, the version of the text you accepted, your language, your IP address and your browserâs user-agent string. We keep this so that we can show the consent was given (GDPR Article 7(1)). This is the only purpose for which we store an IP address ourselves; otherwise IP addresses are used only momentarily, for example to protect the service against abuse.
3.9E-mail and SMS
We send transactional e-mail through Resend (USA): booking confirmations, changes and reminders to the salonâs clients on the salonâs behalf, and password-reset and account messages to staff. If the salon has enabled SMS, text messages are sent through Messente (Estonia), with Twilio (USA) as a fallback route. The recipientâs address or number and the message text are shared with these providers only to deliver the message. Marketing messages to a salonâs clients are sent only on the salonâs instruction; the salon is responsible for having the right to contact them.
4.Legal bases
Under the GDPR every use of personal data needs a legal basis. Ours are:
- Staff account data, sessions and device tokens â our legitimate interest in providing the service your salon has contracted and in keeping it secure (Article 6(1)(f)); where you are the owner who signed the contract, performance of that contract (Article 6(1)(b)).
- Salon client data (bookings, client cards, chat, invoices, e-mail and SMS) â processed on the salonâs documented instructions under a processing agreement (Article 28). The salonâs own basis is normally its contract with the client or its legitimate interest in serving them.
- Consent records â our obligation to be able to demonstrate consent (Article 7(1)) and our legitimate interest in keeping evidence of it (Article 6(1)(f)).
- Analytics â our legitimate interest in understanding how the service is used and how fast it loads, based on anonymous data (Article 6(1)(f)).
- AI campaign drafts for owners â performance of our contract with the salon (Article 6(1)(b)).
- SMS billing records (which salon sent how many messages, so that we can invoice the salon) â our legal obligation under the Estonian Accounting Act (Article 6(1)(c)).
- Push notifications â only after you allow them on your device; you can withdraw that permission at any time in the device settings.
5.Sub-processors and international transfers
We use the following service providers to run BlissfulBookings. Each processes data only for the stated purpose and under a contract with us. Where a provider is in the United States, transfers rest on the EU-US Data Privacy Framework and/or the European Commissionâs Standard Contractual Clauses, as applicable to that provider.
| Provider | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Supabase | Database and file storage | EU (Frankfurt, Germany) | Not needed â data stays in the EU |
| Vercel | Hosting, Web Analytics, Speed Insights | USA | EU-US Data Privacy Framework and/or Standard Contractual Clauses, where applicable |
| Google â Firebase Cloud Messaging | Push notification delivery to staff devices | USA | EU-US Data Privacy Framework and/or Standard Contractual Clauses, where applicable |
| Apple â Push Notification service | Push notification delivery to iPhones and iPads | USA | EU-US Data Privacy Framework and/or Standard Contractual Clauses, where applicable |
| OpenAI | Chat: automatic replies, language detection, translation, knowledge-base embeddings | USA | EU-US Data Privacy Framework and/or Standard Contractual Clauses, where applicable |
| Google â Gemini | Marketing campaign drafts for owners | USA | EU-US Data Privacy Framework and/or Standard Contractual Clauses, where applicable |
| Resend | Transactional e-mail | USA | EU-US Data Privacy Framework and/or Standard Contractual Clauses, where applicable |
| Messente | SMS, when the salon enables it | Estonia | Not needed â EU |
| Twilio | SMS fallback route | USA | EU-US Data Privacy Framework and/or Standard Contractual Clauses, where applicable |
| Anthropic | Web sign-up only: structuring the service list imported from a salonâs previous system | USA | EU-US Data Privacy Framework and/or Standard Contractual Clauses, where applicable |
| Apify | Web sign-up only: reading the salonâs public social-media pages while its website is set up | USA | EU-US Data Privacy Framework and/or Standard Contractual Clauses, where applicable |
Apple and Google also receive the content of push notifications (section 3.2). We do not sell personal data and we do not share it with anyone for advertising.
6.How long we keep data
| Data | Retention |
|---|---|
| Session cookie | 7 days, or until you log out |
| Device tokens | Until you log out or the token becomes invalid |
| Staff account (name, e-mail, role, hourly rate) | Until you or the salon delete it (section 7) |
| Bookings, client cards, chat conversations (including visitor context), invoices, campaign images | For as long as the salon uses BlissfulBookings and according to the salonâs instructions; erased within 30 days after the salon closes its account (section 7) |
| SMS billing records (which salon sent how many messages, for invoicing the salon) | 7 years, as required by the Estonian Accounting Act |
| Consent records | As long as required to evidence the consent: 3 years after the relationship with us ends |
| Analytics | Anonymous from the start; Vercel discards the temporary request hash within 24 hours |
7.Deleting your account
Staff users
Open More (Veel) in the app or the back-office and choose âDelete accountâ. You are taken to blissfulbookings.com/portal/konto/kustuta, where you confirm. Your login and your device tokens are deleted immediately. The salonâs business records â the shifts you worked and the bookings you handled â stay with the salon, because they are the salonâs records about its business, not your account.
Salon owners
If you are the salonâs last administrator, the same page closes the whole salon. The salon is archived immediately: its booking page goes offline and all its logins stop working. After the 30-day window all of the salonâs data, invoices included, is permanently erased. Download or export any invoices you still need before you delete the salon â invoices and receipts were also delivered to the salon and its clients by e-mail when they were issued. The only thing we keep afterwards is the SMS billing log (which salon sent how many messages), for 7 years under the Estonian Accounting Act. We confirm by e-mail when the erasure is complete.
In the app
- Sign in to the app or the back-office.
- Open More (Veel).
- Choose âDelete accountâ.
- Confirm on the page that opens.
You can also ask us to delete your account or your salon by e-mailing info@blisse.ee from the address registered to the account.
8.Your rights and complaints
Under the GDPR you can ask us for access to your personal data, have it corrected or erased, restrict or object to its processing, and receive the data you gave us in a portable format (Articles 15â21). Where processing is based on consent, you may withdraw it at any time; this does not affect what was done before (Article 7(3)). We do not make decisions about you that are based solely on automated processing and have legal or similarly significant effects (Article 22).
To exercise a right, e-mail info@blisse.ee. We reply within one month. If you are a salonâs client, please contact your salon first â it is the controller of your data and we help it answer. If you write to us directly, we forward your request to the salon and tell you so.
If you believe we handle your data unlawfully, you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) or to the supervisory authority of the EU country where you live or work.
9.Security
All traffic between your device and BlissfulBookings is encrypted with TLS. Passwords are stored only as bcrypt hashes. Session cookies are httpOnly, so page scripts cannot read them. Each salonâs data lives in its own tenant-scoped database schema, and within a salon access follows the role the owner has given each account. Our database and file storage are hosted in the EU. If a breach affects your data, we notify the salon and, where the law requires, you and the supervisory authority.
10.Children
BlissfulBookings is a business tool for salons and their staff. It is not directed at children and is not intended for anyone under 16. We do not knowingly collect personal data from children; if you believe a child has an account, write to info@blisse.ee and we will delete it.
11.Changes to this policy
We may update this policy when the service or the law changes. The version and date at the top tell you which edition you are reading. For material changes we notify salon owners by e-mail or in the back-office before they take effect. This is version 1.0, published on 12 October 2026.