Privacy Policy

Effective date: October 24, 2026

This policy explains how BTime LTDA ("we") handles personal data in My Beauty Time: the scheduling and management app for salons, barbershops, clinics and beauty professionals (web, Android and iOS), the online booking page (book.mybeautytime.app), this site and the connection with AI assistants such as ChatGPT and Claude. The Portuguese version is the reference version.

Who is responsible for the data

Data of the people who use the app (owners, admins and employees of a business): we are the controller.
Data of a business's customers (the people a salon or professional serves): the business is the controller and we are the processor. We handle that data only to provide the service to the business, following its instructions. If you are a customer of a business, contact the business first; we can help at the email at the end of this page.

Data we collect

Account: name, email, phone number and role. The password is kept by Google's Firebase Authentication, and we can't see it. If you sign in with Google or Apple, we get the account's name and email.
Business: name, opening hours, services and prices, team, packages, products and stock.
The business's customers: name and phone number; email, birthday and notes when the business adds them; appointment, package and purchase history; and their replies to the WhatsApp confirmation messages.
Schedule: appointments (day, time, service, professional, status, amounts and notes) and blocked times.
Finances: expenses, other income, categories and descriptions logged in the app.
Subscription: plan, email and CPF or CNPJ (Brazilian tax ids) for billing. Card details pass through our servers only to be sent to Asaas; we keep only the token Asaas returns, never the card number.
Device and usage: the push notification identifier, the operating system and app version, and error reports.
This site and the sign-in pages: pages visited, cookies and the campaign that brought you here (see "Cookies and ad measurement").
AI agents: the name of the connected assistant, the address it returns to after authorization, the dates it connected and was last used, and logs of which tool was used for which business (see "AI agents").

Why we use it

To provide the service: schedule, booking page, customers, finances, team and the AI agent tools (performance of a contract).
To send, on the business's behalf, WhatsApp confirmations, reminders and summaries, and emails about your account (performance of a contract).
To bill the subscription and meet tax obligations (contract and legal obligation).
To give support, keep the service secure and fix errors (legitimate interest).
To measure our ads (legitimate interest, see below).

We don't sell personal data, and we never use a business's customer data for ads.

Who we share it with

Only with the providers that make the service work, each with the minimum it needs:

Google (Firebase and Google Cloud): hosting, sign-in, database, server functions and push notifications. All app data is stored on Google's servers in the United States.
Meta (WhatsApp Business): to deliver the business's messages: the customer's phone number and name, the business's name, the service, the day and the time. Meta also gets the Meta Pixel data described below.
Apple: Sign in with Apple and push notifications on iPhone.
Asaas: subscription billing (email, CPF or CNPJ, card or Pix).
Brevo: account emails (name and email of app users).
Sentry: error reports, identified only by the user and business ids, with no names, emails or customer data.
Slack: internal notices to our team about new sign-ups and plan changes (business name, admin's name and email, plan).
The AI assistant you connect (for example ChatGPT by OpenAI or Claude by Anthropic): it gets only the results of the tools it uses at your request. Once a result reaches the conversation, the assistant's own privacy policy applies: OpenAI, Anthropic.
Authorities, when the law or a court order requires it.

Since the servers are in the United States, data is transferred internationally, to providers with safeguards compatible with Brazil's LGPD (art. 33).

AI agents

You can connect My Beauty Time to an AI assistant such as ChatGPT or Claude to check the schedule, book or see the finances by chatting. The connection only happens if you sign in to your My Beauty Time account and select Allow. It follows your role's permissions:

Schedule (read and change): see the schedule, customers, services and team; book, reschedule and cancel appointments and add customers. Employees only reach their own appointments, as in the app.
Finances: see the finances and log expenses and income. Admins only.

The assistant gets only what each tool returns:

Tool	The assistant sends	The assistant gets back
`get_business_info`	—	The business's name and timezone, the current date and time, your name and role, the team (names, roles and the services each one does), the services (duration and price) and the opening hours.
`find_customers`	The name or phone number searched for.	Up to 10 customers: name, the last 4 digits of the phone number, and the dates of their last and next appointments.
`create_customer`	The customer's name and phone number and, if you ask, email and notes.	The new customer (name and phone number).
`list_appointments`	A period of up to 31 days and, optionally, a professional or customer.	Appointments (day, time, status, customer's name, service, professional and notes) and blocked times.
`find_free_times`	A service, one day or up to 7 days and, optionally, a professional.	Each professional's free times.
`book_appointment`	Customer, service, day and time and, optionally, professional and notes.	The new appointment or, when there's a conflict, the conflicts and free times. The customer gets the business's usual WhatsApp messages, as with any booking.
`reschedule_appointment`	The appointment and the new day and time.	The appointment, with its old and new time.
`cancel_appointment`	The appointment.	The cancelled appointment.
`get_financial_summary`	A month.	The month's totals: services, packages, products, other income, expenses by category, result, change from the previous month and what is still expected.
`list_finance_categories`	—	The expense and income categories.
`list_finance_entries`	A month and, optionally, the type and category.	The entries: date, amount, category, description and who added it.
`add_expense`, `add_income`	Amount, date, category, description and whether it repeats monthly.	The new entry.

The tools receive only the data above. We don't read your chat history or the assistant's memory or files. Results never include emails, passwords or customers' full phone numbers (except the number of a customer you just added).

Access keys are stored only as hashes. The authorization code lasts 5 minutes, the access token 1 hour and the refresh token 90 days without use; after that they are deleted automatically. To disconnect, go to My account → AI agents → Disconnect in the web app (app.mybeautytime.app), or remove the connector in the assistant. More in AI agents.

How long we keep it

While the account exists, we keep the business's data to provide the service.
Deleting the account: when you delete the account in the app, the logins are deleted right away and the business is archived. Its data is kept for 30 days, so support can restore the account if you ask, and is then permanently erased.
Customers and appointments removed by the business stop showing in the app and are erased with the account, or earlier if the business asks.
Daily database backups are kept for 5 days.
Server logs are kept for 30 days, and error reports for up to 90 days.
AI agent keys: as described in the previous section.
Billing records are kept for as long as tax law requires.

Your rights and controls

Under the LGPD you can confirm whether we handle your data, access it, correct it, ask for portability or deletion, learn who we share it with and withdraw consent. In the app you can:

edit the account, business and customer data;
disconnect AI agents in My account → AI agents, in the web app;
delete the account in My account → Delete account.

For anything else, write to alex.andrade@mybeautytime.app. We answer within 15 days.

Cookies and ad measurement

We use the Meta Pixel, by Meta Platforms, on this site and on the app's sign-in and sign-up pages (app.mybeautytime.app). It uses cookies to record the pages visited and when a new account is created, to measure our Facebook and Instagram ads. The app's inner pages, with your business's and your customers' data, are never sent to Meta.

When you create an account, we send Meta your sign-up email hashed (SHA-256), so it can match the sign-up to the ad you saw. Meta handles it under the Meta Privacy Policy. The legal basis is our legitimate interest in measuring how we promote the service (LGPD, art. 7, IX). You can object by blocking or clearing cookies in your browser, adjusting your ad preferences on Meta, or asking us at the email below.

Security

Data travels encrypted (HTTPS) and is stored in databases with per-business access rules. AI agent keys are stored only as hashes. Our team's access to data is limited to what support and maintenance need.

Children

The app is made for businesses and is not meant for anyone under 18.

Changes and contact

When this policy changes, we update the date at the top and, for important changes, let you know in the app. Questions: BTime LTDA, alex.andrade@mybeautytime.app.