Legal · effective July 2026
Privacy Policy
The short version: we collect what running your shop requires, we host it carefully, we never sell it, and when you want it gone, it goes. The long version is below — and it’s not long.
1. What we collect
Your account: email and a salted password hash — never the password itself. Your shop: name, slug, services, hours, rules. Your bookings: the name, email, phone and note your customers give when they book. Billing: handled by Stripe; we hold a customer reference, not a card.
2. What we never do
We don’t sell your data. We don’t sell your customers’ data. No ad networks, no third-party trackers, no data brokers, no “partners” clause hiding any of that. The business model is the subscription — you are the customer, not the product.
3. Analytics without spying
Traffic analytics are self-hosted and privacy-first: aggregate counts of pages and referrers, no cross-site tracking, no advertising identifiers, no profile of anyone. We see that a page was visited, not who your visitors are.
4. Where your data lives
The site and its data are hosted on Cloudflare’s network. Commerce infrastructure runs on AWS. Booking data is stored per-tenant — your shop’s records are scoped to your shop and never mixed into anyone else’s.
5. Payments
Card numbers go directly from the payer’s browser to Stripe. They never touch our servers, our logs, or our databases. Stripe’s own privacy policy governs what they hold.
6. Your customers’ data
When someone books with your shop, that record belongs to your business — we process it only to run the booking: showing it in your dashboard and sending the emails the booking needs. We don’t contact your customers for our own purposes.
7. Email
We send what the service requires: booking notices, receipts, password resets, and the rare must-know about your account. Marketing mail only ever with consent, and every one of those unsubscribes in one click.
8. Cookies
One session cookie to keep you logged in, plus a flag that remembers you’re logged in so the header can say so. That’s the list. No tracking cookies, so no cookie banner.
9. Retention and deletion
Data is kept while your account is active, because it IS your shop. To delete your account and its data, email contact@lucernanoetico.com from your account address — we confirm, then erase, keeping only what bookkeeping law forces us to keep, for exactly as long as it forces us.
10. Changes and contact
If this policy changes in a way that matters, we email you first. The current version always lives at this address. Privacy questions go to contact@lucernanoetico.com — a person answers.
Deletion requests and privacy questions: contact@lucernanoetico.com