appcitas.
Start free
← Back to home

Privacy Policy

Last updated: October 24, 2026

At Appcitas, a service operated by Juanships LLC, your privacy and that of your customers matters. This policy explains what data we collect, why, and your rights over it.

1. What we collect

From account holders (businesses):

  • Name, email, phone, business name.
  • Billing data (processed by Stripe or, for Colombian accounts paying by monthly link, by Wompi).
  • Services, schedule, and professional configuration.

From end customers (who book with you):

  • Name, phone number, or email if applicable.
  • AI assistant conversation messages.
  • History of bookings at your business.

Automatically:

  • Technical data: browser, IP, analytics events via Google Analytics 4.
  • Cookies: see Cookies Policy.

2. What we use it for

  • Operate the service: process bookings, sync your calendar, send confirmations.
  • Improve the product through aggregated, anonymized analysis.
  • Communication: service notifications, support, and updates.

3. Who we share it with

We do not sell personal data. We share only with:

  • Infrastructure providers (Supabase, AWS) under confidentiality agreements.
  • Payment processors (Stripe and, for Colombian accounts paying by monthly link, Wompi).
  • Meta (WhatsApp, Instagram, Facebook), when you connect those channels.
  • AI providers (OpenAI), which process conversation messages to generate the assistant's replies.
  • Authorities, where legally required.

4. Your rights

  • Access your data.
  • Request correction or deletion.
  • Export your data (bookings, customers, configuration).
  • Close your account anytime; data is deleted within 30 days.

5. Storage and security

  • Data stored on encrypted infrastructure (Supabase, AWS).
  • TLS on all communications.
  • WhatsApp tokens stored securely.

6. Retention

We retain data while your account is active. After closure, we delete within 30 days unless legally required to retain longer.

7. Children

Appcitas is not directed at children under 13.

8. Changes

We may update this policy. We will notify you of material changes by email.

9. If you are a customer of a business that uses Appcitas

Who is responsible: the business where you book is the Controller. Juanships LLC (Appcitas) is the Processor and handles your data on the business's behalf, under Colombian Law 1581 of 2012 and Decree 1377 of 2013.

What data we handle and why:

  • Name and WhatsApp: record the appointment, identify you and remind you of it.
  • Appointment details (service, date, time, professional, price): manage the business's calendar.
  • Messages you write to the assistant: answer your questions and manage your appointment.
  • Technical data such as IP and browser: security and abuse prevention. Not used for advertising.
  • Promotions consent, if you gave it: so the business can send you promotions on WhatsApp.

Promotions

Only if you ticked the box when booking. You can withdraw your consent anytime by writing to the business or to us. Not ticking it does not affect your booking.

Providers

We use third-party artificial intelligence and marketing providers to answer your messages, send you reminders and measure use of the service. Some may be outside Colombia. We require them to protect your data as the law demands.

Data on your phone

We save your name and WhatsApp in your phone's browser so we do not ask for them again. You can delete them with "Forget" after booking.

How long

While the business uses Appcitas and up to 12 months after, unless you ask us to delete them sooner. Evidence of your consent is kept for as long as the law requires.

Your rights as a customer

You can access, update, correct and delete your data, and withdraw your consent. Write to support@appcitas.com. We answer inquiries within 10 business days and claims within 15 business days.

10. Deposit receipts

  • What we collect: the image of the receipt you send and what we extract from it (amount, date, recipient and reference).
  • Why: to show the business the receipt and an indicative signal of whether it matches the deposit. We do not use it for anything else.
  • Who sees it: the business where you booked. Our team only accesses it for support or when the law requires it.
  • Artificial intelligence provider: we process the image with an artificial intelligence provider (OpenAI) that may process the data outside your country, under contractual safeguards.
  • How long: the image and the extracted data are deleted after 90 days. The result of the review ("looks right" or "review") is kept with the appointment.
  • Recommendation: do not send documents other than the deposit receipt.
  • Deposit number blocking. If a business marks a deposit as "Not received", we store the customer's phone number linked to that business to prevent new online bookings with that business while it has deposits turned on. The business is the Controller of that data and Appcitas acts as Processor. The block is not shared with other businesses or used for any other purpose. The business can remove it at any time, and the customer can ask the business to review it or write to support@appcitas.com to exercise their rights of access, rectification and erasure.
  • Your rights: the same as in the section for customers, by writing to support@appcitas.com.

11. Contact

support@appcitas.com