Your information,
with a clear purpose.

Prepared 14 September 2026. This notice describes the supplied implementation, with account connections still pending.

Who is responsible

Panagiotis Volis (Nuvendri) 18 Mideias, Livadeia, 32100, Greece Privacy contact: support@nuvendri.com

What the product processes

• Email entered at checkout, a purchase access identifier, and hashed login tokens, used to deliver the kit and protect access.
• Purchase references, offer, amount, currency and payment-reversal status, used for delivery and access control.
• Business details you enter, daily aggregate tracker records and quick-start progress, saved to your account.
• Contact-form name, email and message, delivered to the support inbox only when email delivery is configured.
• Limited request metadata used by the hosting provider, and temporary rate-limit counters used to protect forms.

The product does not request salon client names, contact lists or health information. The AI assistant prepares text locally in the page and does not send it to an AI API. If you paste that text into another service, its privacy terms apply.

Why information is used

Account, payment and workspace information support the requested purchase and service. Support messages are used to answer the enquiry. Fraud prevention and rate limits protect the service. Accounting records may be kept where legally required. Optional marketing must have its own appropriate permission and opt-out process; a purchase does not automatically enrol you in promotional email.

Providers and international processing

The proposed implementation uses the owner’s cPanel/Node.js host and MySQL database for hosting and storage, Stripe for checkout and payments, and the owner’s SMTP/email provider for purchase access and support delivery if connected. Payment-card details are entered into Stripe’s checkout, not stored in this application. Provider locations, contracts, transfer safeguards and the final subprocessor list require owner review before operation.

Cookies and tracking

Essential cookies keep a purchased toolkit open for up to 30 days and tie a checkout return to the browser that started it for up to two hours. One-use email links provide access without a password. Welcome links expire after seven days and requested links after 15 minutes. No Meta Pixel, advertising cookie, session recorder or external analytics script is enabled in this build. Optional analytics must be disclosed and gated by an appropriate consent mechanism before activation.

Retention and deletion

Proposed policy for owner review: workspace data until a verified deletion request or the disclosed inactivity period; expired access tokens and sessions removed by the maintenance procedure; support correspondence for up to 12 months after resolution; temporary anti-abuse counters for up to 30 days; purchase records for the seller’s applicable accounting retention period. These are proposed periods, not a claim that automated deletion is operating. The launch checklist requires an implemented deletion and retention procedure.

Your choices and rights

You can export your workspace from the dashboard. Contact the published privacy address to request access, correction, deletion or other applicable rights. We may verify the request and retain records that law requires. You may complain to your relevant data-protection authority. A customer who opts out of marketing can still receive necessary purchase or service communications.

Security and updates

The implementation checks account access on the server and restricts paid content to verified purchases. No system can promise absolute security. Material changes to this notice will be dated and communicated where required.