At Acomply we respect your privacy. This policy explains what information we collect when a business uses the platform or a customer books through it, why we collect it, and how we protect it. It is written in accordance with Law 1581 of 2012 (Habeas Data — Colombia's data protection law) and Decree 1377 of 2013.
1. Who we are
Acomply is a software platform (SaaS) that lets barbershops, hair salons, spas, nail studios, and other personal-service businesses manage online bookings, communicate with their customers over WhatsApp, generate marketing campaigns with artificial intelligence, and process payments. We operate in Colombia and handle inquiries at hola@acomply.co.
2. Who's responsible for your data
We distinguish two relationships so it's clear who decides how each piece of data is processed:
- If you're an owner or member of a business that uses Acomply, we (Acomply) are the data controller for the data tied to your admin account (email, password, billing information, business configuration).
- If you're a customer booking with a business through acomply.co/{business}, the business is the data controller for the data it collects about you (your name, contact, appointment history). Acomply acts as the data processor — we process it on the business's instructions to deliver the service. To exercise your rights over that data you can contact the business directly or us, and we'll coordinate.
3. What data we collect
From businesses and their teams
- Business name, slug, address, hours, photos of the location.
- Email address, password (hashed), name, role (owner / professional).
- Billing information for the subscription and add-on packs.
- Business configuration: services, prices, products, commissions.
- Credentials to connect channels (WhatsApp Business token, Wompi keys).
From customers booking through Acomply
- Name and, if you provide it, email address.
- WhatsApp number (when you book or message us from it).
- Bookings: service, professional, date, time, notes, and full appointment history.
- Reviews and ratings you choose to leave after the service.
- Conversations with the WhatsApp assistant (when the business has it enabled).
- If you use the look simulator: the photo you upload and the generated results. The photo is kept only to show you your look and is deleted within 30 days.
- External sign-in: if you sign in with Google, we receive your name, email, and Google identifier. We don't have access to your password.
Technical data (from any visitor)
- IP address, device type, browser, operating system.
- Pages visited and usage events, in aggregated form.
- Essential cookies (session, language) and, with your consent, measurement cookies.
4. How we use your data
- Operating the platform: showing your calendar, confirming appointments, sending reminders.
- Sending transactional messages via WhatsApp and email (confirmation, 24-hour reminder, changes, cancellations, invoice).
- Processing payments through authorized providers (Wompi).
- Charging the subscription and the add-on packs you purchase.
- Improving the platform by analyzing aggregated statistics.
- Detecting and preventing fraud, abuse, or misuse of the service.
- Complying with legal obligations or responding to requests from competent authorities.
We don't use your personal data to train our own artificial-intelligence models. We also don't sell personal information to third parties.
5. Who we share your data with
We share data only with providers that help us operate the service:
- Meta Platforms / WhatsApp Business Cloud API: sending and receiving WhatsApp messages.
- Wompi (Bancolombia): online payment processing (subscription and packs).
- Vercel and Neon: application and database hosting.
- Resend: transactional email delivery.
- OpenAI: language and image models for the AI agents. Conversations and images are sent in "no-training" mode where the provider supports it.
- Google: sign-in with a Google account (optional).
Each provider processes data under its own privacy policies and only as far as needed to provide us with the service. Some servers are located outside Colombia; international transfers go to countries with protection levels deemed adequate or under standard contractual clauses.
6. How long we keep your data
- Business accounts: while the subscription is active, plus 12 months after cancellation for tax and accounting purposes.
- End-customer data: for as long as the business keeps it in its account. If the business closes its account or you request deletion, we delete your personal data within 30 days.
- Technical logs: up to 90 days.
- Billing information: for the period required by Colombian tax law (minimum 5 years).
7. Your rights
Under Law 1581 of 2012, at any time you can:
- Know what information we hold about you.
- Ask us to correct it if it's outdated or wrong.
- Request its deletion or the closure of your account.
- Revoke any consent you've granted.
- File complaints with the Superintendence of Industry and Commerce (SIC).
To exercise these rights, write to us at hola@acomply.co. We respond within a maximum of 15 business days, extendable by 8 additional days as the law allows.
8. Security
Your information travels over HTTPS and is stored in encrypted databases. Passwords are stored with a cryptographic hash (bcrypt) — never in plain text. Separation between businesses is enforced at the database level via Row-Level Security. We limit internal access to strictly necessary personnel and maintain audit logs.
9. Cookies
We use essential cookies (session, language) that don't require consent because they are necessary for the platform to work. If you give consent via the banner, we may use optional cookies to understand aggregate use of the service. You can change your choice from the bottom banner at any time or delete the acomply-cookie-consent entry from your local storage. More details in our Cookie policy.
10. Minors
The service is intended for users over 14. If you are a minor, you must have authorization from your legal guardian before registering. If we detect an account created without that authorization we will delete it.
11. Changes to this policy
If we update this policy, we will change the "Last updated" date at the top and, when changes are significant, we will let you know by email or WhatsApp.
12. Contact
For any question about this policy or how we process your data, write to us at hola@acomply.co.