Privacy
Preliminary version. It describes the actual state of the service on the date shown and is pending legal review before Citoo is offered commercially.
This page describes what data Citoo processes today. It is limited to what the software actually does: there is no analytics, advertising, profiling or data selling.
If you sign up, book or contact us
Public sign-up requests the business name, owner email and subdomain; email is verified before they are reserved. If you choose a paid plan, Citoo stores the order and its status but no card data. The opaque status token stays only in sessionStorage for the browser session.
A public booking stores the name, email, phone and note the customer submits to manage the appointment. If you write to hola@citoo.net, the content stays in that mailbox so we can reply.
If you have an account
For a business account we store:
- name and email address;
- the password, always hashed (never in plain text);
- if you sign in with Google, the identifier and email Google returns — we do not request access to your calendar or contacts;
- the date of your last sign-in and your role within the business.
Cookies
Only two cookies are used, and only once you sign in: the session cookie (needed to keep you signed in, flagged HttpOnly and SameSite=Lax) and the CSRF protection cookie. There are no third-party, analytics or advertising cookies.
Where the data lives
Each business has its own database schema, separate from the others. The infrastructure runs on our own server; the database is not exposed to the internet and is reachable only through a private administration network.
Third parties
Third parties may include Google when you choose to sign in with Google, Mercado Pago when you purchase or renew a paid plan, the transactional email provider, the server provider, and the object storage providers that host public files and private exports. No analytics or advertising tools are connected.
Access, correction and deletion
You can ask us what data we hold about you, correct it or delete it by writing to hola@citoo.net. A business owner can request closure from the dashboard and, after quarantine, download a time-limited private export of operational data. Other requests are handled manually.
Changes
When the product adds features that process new data (for example, reminders or calendar synchronisation), this page will be updated before they are switched on.