Data processing agreement

1. Roles

The Business is the controller of its clients' and its team's data: it decides what the data is used for.

Citauno is the processor (operador, under Brazil's LGPD): it processes that data only to provide the service and on the Business's instructions.

For each person's own Citauno account data (their user, email and password), Citauno is the controller, as the Privacy policy explains.

2. Which data, about whom

About the Business's clients: name, email, WhatsApp, birthday, gender, notes, tax ID or document and billing details, bookings, sales, payments, packages, loyalty, reviews and the messages exchanged through Citauno.

If the Business uses client records: health data, treatment notes, photos and signed forms. These are sensitive data: the Business records them only with the client's consent or another valid legal basis.

About the Business's team: name, email, phone, hours, services and commissions.

3. What for, and for how long

Citauno processes this data for the calendar, online booking, reminders and messages, sales and their receipts, reports and the other features the Business switches on, for as long as the Business uses Citauno.

Citauno does not sell this data or use it for its own advertising.

4. Instructions and confidentiality

How the Business sets up and uses Citauno are its instructions. If an instruction seems unlawful to us, we tell the Business.

People on Citauno's team who access this data do so only to give support or fix a problem, and are bound by confidentiality.

5. Security

Encryption in transit (TLS) and at rest (AES-256), access according to each person's role in the Business, a record of who exports or anonymizes a client's data and of who creates, edits or downloads their record, and backups.

6. Sub-processors

The Business authorizes Citauno to use the providers listed in section 6 of the Privacy policy (for example, Amazon Web Services for hosting and Meta for WhatsApp messages). Citauno holds them to data protection obligations equivalent to this agreement's.

Before adding a provider that processes this data, Citauno lists it in that section and updates the policy's date.

7. International transfers

Citauno's infrastructure runs on Amazon Web Services (us-east-1, United States), and some providers process data in other countries. Citauno chooses providers that offer data protection safeguards.

8. Data subject requests

When a client asks to see, take or erase their data, the Business answers. For that, each client card has Export data and Anonymize (owners and admins).

If a client of the Business writes to Citauno, Citauno asks them to contact the Business and, if the Business needs it, helps it answer.

9. Security incidents

If Citauno confirms an incident affecting the Business's data, it tells the Business without undue delay, with what is known: which data, about whom, and what was done, so the Business can meet its own obligations.

10. When the Business leaves Citauno

Before closing its account, the Business can ask hola@citauno.com for a copy of its data. Once it closes, its page stops showing and its data stays stored, unused, in case it comes back. If the Business asks for it to be deleted (hola@citauno.com), Citauno deletes or anonymizes its clients' and team's data, except what the law requires keeping, such as issued receipts and payment records.

11. Information and audits

On request, Citauno gives the Business the reasonable information it needs to show that this agreement is being met.

12. The Business's part

Having a legal basis for the data it records, telling its clients and its team that it uses Citauno, and not recording data it has no right to process.

13. Versions and contact

Each change to this agreement is published on this page with a new date, and the Business's owner is asked to accept the new version in their admin. Citauno keeps who accepted each version and when.

Questions: hola@citauno.com.