Privacy Policy

Stilo values your privacy. This policy explains what data we collect, why, how we use it, and your rights over it.

1. Data controller

Macoix Group S.A.S. (hereinafter, “Stilo”) is responsible for processing personal data collected through the Stilo and Stilo Business applications.

Address: [TO BE CONFIRMED: corporate address of Macoix Group S.A.S.]

Tax identification: [TO BE CONFIRMED: NIT/CUIT/RUT]

Privacy contact: [email protected] (to be confirmed)

2. Data collected

2.1 Identification data

When you register, we collect:

Mobile phone number
Name (for professionals)
Business location (for professionals and ENTERPRISE businesses)

This data is essential for creating your account and enabling clients and professionals to find each other.

2.2 Identity verification (KYC)

For professionals and ENTERPRISE businesses:

Identity document (type, number, photograph)
Verification selfie

This data is captured by the app and processed to verify your identity. It is retained according to legal timelines.

2.3 Approximate location

The app accesses your approximate location (not precise to meters, but sufficient for proximity):

To show nearby professionals (for clients)
To enable geographic search

Location is processed in real time during search and is not stored in permanent history without explicit consent.

2.4 Platform and behavior data

We collect information about your app usage:

Bookings made (date, time, professional, duration)
Ratings and reviews published
Searches (professionals visited)
Photos uploaded (professional portfolio)
Messages and communication (client’s phone number shared with professional)

2.5 Device data

To improve experience and prevent fraud, we collect:

Unique device identifier
Operating system and version
Device model
Approximate IP address

2.6 Profile photos and portfolio

If you upload photos, we process:

Image metadata (capture date)
Visual content (for quality analysis by automated system)

Client photos in reviews are not collected; clients cannot upload photos publicly.

3. Legal basis for processing

We collect and process data because:

Contract execution: essential data for account creation and booking management
Legitimate interest: usage analysis, fraud prevention, platform improvement
Legal compliance: data retention for tax and accounting obligations
Explicit consent: for push notifications (opt-in), advanced analytics

You can withdraw consent for notifications at any time from the app.

4. Push notifications and Firebase Cloud Messaging

Stilo uses Firebase Cloud Messaging (Google’s service) to send notifications:

Booking confirmation
Availability changes
Personalized offers (only if you authorize)
Security alerts

You can disable notifications in app settings or device settings. This does not affect basic booking functionality.

5. Analytics and Crashlytics

Stilo uses Google Firebase Analytics and Crashlytics to:

Understand usage patterns (which features are popular)
Identify technical errors and improve stability
Measure app performance

These services do not receive phone number or sensitive data. We process data in aggregate form (not at individual level) in behavior reports.

6. Google Calendar integration (optional)

If you connect your Google Calendar account via OAuth:

Stilo accesses your calendar to sync availability
We do not store your Google password
The connection is direct between your device and Google
You can disconnect at any time in settings

Google is responsible for your data with Google; review their Privacy Policy.

7. Data processors and third parties

7.1 Third-party vendors

Your information is shared with:

Google (Firebase, Google Calendar): app infrastructure, notifications, analytics. Review their privacy at google.com/policies/privacy
SMS provider: OTP code delivery. [TO BE CONFIRMED: SMS provider name and policy]
Payment provider (if applicable in future): subscription processing. To be confirmed.

7.2 Between users

Phone: when you make a booking, the client receives the professional’s phone number (and vice versa) for coordination. This is essential to the platform.

Name and location: professional name and approximate location are public in client searches.

Reviews: your reviews and ratings are public under your name.

7.3 Authorities

We may share data if required by law or court order.

8. International transfers

Stilo uses Google Cloud (servers in multiple countries) for storage. When we store data on servers outside [TO BE CONFIRMED: country/region], we apply protective measures: EU standard contractual clauses or other legally equivalent mechanisms.

Google holds international privacy certifications (Privacy Shield, etc.). Review their compliance documentation.

9. Data retention periods

Active account data: while your account is active
Post-closure data: [TO BE CONFIRMED: period, typically 1-3 years] for tax and accounting compliance
Portfolio photos: retained while account is active; deleted on closure after retention period
KYC data: retained as required by applicable law — [TO BE CONFIRMED: retention period and the rule that mandates it]
Technical logs: [TO BE CONFIRMED: typically 90 days]
Analytics: aggregate data retained indefinitely; individual data per the retention configured in Google Analytics — [TO BE CONFIRMED: value set in the console]

10. Your rights

You have the right to:

10.1 Access

Request a copy of all your personal data we hold. We will respond within [TO BE CONFIRMED: typical period 30 days].

10.2 Rectification

Correct inaccurate data. You can do this directly in your profile or request it via the contact email.

10.3 Erasure (“right to be forgotten”)

Request that we delete your personal data, subject to:

Pending tax or contractual obligations
Fraud investigation or legal compliance
Retention necessary for defense of claims

10.4 Restriction of processing

Request that we pause data use while you verify a claim.

10.5 Portability

Receive your data in structured, readable format to transfer to another service (where technically possible).

10.6 Objection

Opt out from data processing for direct marketing (easily activated in app settings).

10.7 Automated decisions

You have the right not to be subject to decisions based solely on automation that significantly affect you (such as account blocking without human review).

11. Minors

Stilo is not designed for anyone below the digital age of consent in your jurisdiction — [TO BE CONFIRMED: applicable minimum age; it varies by country]. If we discover a minor has provided data without guardian consent, we will delete the information.

Ages 13-18: may use Stilo with guardian consent. Contact [email protected] for verification.

12. Policy changes

Stilo may update this policy. Important changes will be notified through the app with at least [TO BE CONFIRMED: typically 15 days] notice.

Continued use constitutes acceptance of changes.

13. Security

Stilo implements technical and organizational measures to protect your data:

Encryption in transit (SSL/TLS)
Encryption at rest for sensitive data
Restricted access to authorized equipment
Access auditing
Incident response plan

We cannot guarantee absolute security. If you suspect a security incident, notify [email protected] immediately.

14. Contact and rights

To exercise your privacy rights or make inquiries:

Email: [email protected] (to be confirmed)

Postal address: [TO BE CONFIRMED: corporate address of Macoix Group S.A.S.]

We will respond within the applicable legal timeframe — [TO BE CONFIRMED: period under your jurisdiction’s rules].

If you believe your rights were not respected, you can file a complaint with the competent data protection authority: [TO BE CONFIRMED: local authority, e.g., AEPD in Spain, CNIL in France].

Version: August 2026 | Status: Draft subject to legal review