Privacy Policy
Who we are
Kanso Salon is a service of Sakura Care SRL, a Belgian company, enterprise number BE 1006.924.039, registered office De Kleetlaan 5BC, 1831 Machelen, Belgium. Kanso Salon provides beauty salons with a messaging assistant (WhatsApp, later Instagram and Messenger), an online agenda and related tools.
Two different situations
- Clients of a salon who write to that salon. The salon is the data controller. Sakura Care SRL acts as a processor, only on the salon's instructions and under a data processing agreement (Article 28 GDPR).
- Salons themselves (owner, team, billing). Sakura Care SRL is the data controller.
Data processed by the assistant
- WhatsApp number or account identifier, and displayed profile name.
- Content of the messages exchanged with the salon. Voice messages are transcribed to text; the audio recording is not kept by our systems.
- Date and time of messages, and whether a team member needs to reply.
The assistant never asks for health, payment or identity data. It does not book, cancel or move appointments: it sends the salon's booking link.
Why
To answer clients' questions on behalf of the salon, pass to the team the requests that need a person, and keep the conversation history for the salon. No advertising, no resale, no profiling.
Service providers (sub-processors)
| Provider | Role | Location |
|---|---|---|
| Meta Platforms Ireland Ltd | WhatsApp Business Platform (sending and receiving messages) | EU / as set by Meta |
| Anthropic, PBC | Claude model: drafting replies | United States (data stored in the US; processing possible in Europe, Asia, Australia) · Standard Contractual Clauses |
| OpenAI Ireland Ltd | Transcription of voice messages | Processing possible in the United States · Standard Contractual Clauses |
| Railway | Server hosting | Amsterdam (EU) |
| Brevo | Alert e-mails to the salon team | France (EU) |
| Backblaze | File backups, kept 30 days | European Union (EU Central region) |
For providers outside the European Union, transfers rely on the European Commission's Standard Contractual Clauses or on the EU–US Data Privacy Framework.
Retention
Conversations are kept for 12 months after the last message, then deleted automatically. When a salon ends its subscription, its data is deleted within 30 days; a copy is provided on request before deletion.
Your rights
Access, rectification, erasure, restriction, objection and portability. If you are a client of a salon, contact that salon first; we help it respond. You can also write to info@sakuracare.be. To delete a conversation, write "delete" to the salon or to this address: deletion is done within 7 days. You may lodge a complaint with the Belgian Data Protection Authority (www.dataprotectionauthority.be).
Security
Encrypted connections, salons' access tokens encrypted at rest, signature of every Meta message verified, access limited to the people who need it.