Privacy and data
Effective from 2 de julio de 2026. Version 2026-07-02. This policy accompanies the terms of use and explains personal data processing. Terms of use 2026-07-02.
Aestelix may process account data, users, workspace, settings, clients, appointments, services, resources, packages, accounting movements, system activity, technical notes, consent records and data needed to operate the schedule.
Some features may include allergies, contraindications, aesthetic notes, progress, before/after images or consent records. These should be recorded only when needed for the service and with clear information to the client.
Data is used to authenticate users, separate each workspace, manage appointments, clients, services, team members, packages, traceability, operational accounting, security, support and experience improvements.
Aestelix provides the technical tool. The center is responsible for informing clients, obtaining consent when required, correcting inaccurate data and responding to access, rectification, deletion or objection requests.
The app uses authentication, roles, permissions, access rules and workspaceId to separate each center's information. Each administrator must carefully manage invited users, assigned permissions and devices used.
Data is retained while the center needs it to operate or comply with obligations. The center may request or execute deletion processes when there is no longer a valid purpose, except where applicable legal obligations require retention.
The platform may rely on infrastructure, authentication, database, hosting and technical analytics providers. These providers act to deliver the service and maintain security, availability and support.
Depending on applicable law, a person may request access, correction, deletion, restriction, portability or objection to data processing. The center must handle these requests with care and traceability.
Aestelix provides an optional feature to import contacts from Google Contacts. When enabled, Aestelix requests read-only access to the user's address book (contacts.readonly scope) via OAuth 2.0, exclusively with the user's explicit consent. Use: contact data (name and phone number) is read once during the import action and saved exclusively within the center's Aestelix workspace to populate the client directory. Data is used solely for this declared purpose and never for advertising, profiling, or AI model training. Sharing and disclosure: Aestelix does not sell, rent, transfer, or disclose Google user data to any third party under any circumstances. Google Contacts data is not shared with analytics, advertising, or external marketing platforms, nor with any entity outside Aestelix. Protection: imported contact data is stored in Firestore, protected by workspace-scoped security rules tied to workspaceId and by Firebase Authentication. Only authenticated users within the same workspace can access it. The Google OAuth access token is not stored beyond the active session. Retention and deletion: imported contact data is retained while the center's Aestelix account remains active. Individual client records can be deleted at any time from within the app. Upon workspace deletion, all data including imported contacts is permanently purged. Users may revoke Google access permission at any time at myaccount.google.com/permissions.
The use of raw or derived user data received from Google APIs by Aestelix will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Aestelix uses Google Contacts data solely to import clients into the center's workspace and for no other purpose. Data received from Google APIs is not shared, sold, or transferred to any third-party artificial intelligence service.
Aestelix integrates the Claude API (Anthropic, Inc.) to power center statistics analysis, operational recommendations, and automated WhatsApp appointment scheduling and cancellation notifications. These features operate exclusively on the center's own operational data stored in Firestore (appointments, clients, services, accounting movements). Data obtained through Google APIs — including contacts imported via Google Contacts — is never transferred to Anthropic or any other artificial intelligence provider. Imported Google Contacts data remains in Aestelix's Firestore database as the center's own workspace data and does not leave the Aestelix environment for external AI systems. Anthropic's paid API tier does not use customer data to train its models. For more information: anthropic.com/privacy.