Privacy Policy

Introduction

OptimyCloud LLC ("PostCare", "we", "us") is committed to protecting the privacy of its users and their clients. This policy explains how we collect, use, and protect personal data in accordance with applicable data protection laws and the European General Data Protection Regulation (GDPR) for users located in the European Union.

Data We Collect

We collect the following categories of personal data:

• Account information: name, email address, phone number of studio users
• Studio information: studio name, country, timezone, review and booking links
• Client data: first name, phone number, session date and service (provided by studios for aftercare messaging)
• Aftercare exchanges: messages sent and received, alerts and photos a client chooses to send
• Usage data: login timestamps, feature usage (via Sentry for error tracking)

Purpose of Processing

Personal data is processed for the following purposes:

• Providing the aftercare messaging service (contract performance)
• Sending automatic WhatsApp aftercare messages to clients on behalf of studios
• Handling client alerts so the studio can get back to them
• Ensuring platform security and error monitoring

Legal Basis

• Contract performance: processing necessary to provide the service to studios
• Consent: client data is processed based on the consent obtained by the studio before the first message
• Legitimate interest: error monitoring and platform security

Data Recipients & Transfers

Your data may be processed by the following third-party services:

• Supabase (database hosting) — Singapore/US
• Twilio (WhatsApp messaging) — US
• Resend (email delivery) — US
• Sentry (error monitoring) — US
• Cloudflare (security, captcha) — US
• Anthropic (automatic replies and PDF import processing) — US

These providers maintain appropriate data protection standards. International data transfers outside the EU are conducted based on Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring an adequate level of protection for your personal data.

Data Retention

Account data is retained for the duration of the service contract. Client aftercare data is retained for 12 months after the last message delivery. Photos submitted via concern reports are automatically deleted after 90 days. Data is deleted upon account closure or upon request.

Concern Report Photos

When a client sends an alert, they may add photos. These photos are stored securely (Supabase Storage) and are only visible to the studio team. They are permanently deleted after 90 days. Clients can ask for immediate deletion at any time by contacting their studio or emailing contact@postcare.net. Photos are never shared with third parties or used for marketing.

Your Rights

Under applicable data protection laws and the GDPR (for EU residents), you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request deletion of your data
• Object to processing
• Data portability
• Restrict processing of your data
• Withdraw consent at any time, without affecting the lawfulness of prior processing

To exercise these rights, contact us at: contact@postcare.net

Data Protection

For any questions regarding data protection, contact us at contact@postcare.net. Complaints may be addressed to the relevant Data Protection Authority, or for EU residents, to your local supervisory authority (e.g., CNIL in France: www.cnil.fr).

Cookies

PostCare uses essential cookies for authentication and session management. We also use Sentry for error tracking. No advertising cookies are used. See our cookie banner for more details.

9. WhatsApp messaging

PostCare delivers aftercare messages written by the studio via WhatsApp. PostCare is a messaging tool and does not provide medical advice: messages are aftercare reminders, review and booking links, and a button to reach the studio. Client consent is obtained by the studio before the first message. Clients can opt out at any time by replying STOP or contacting their studio.