LEGAL
Privacy Policy
Last updated: August 10, 2026
1. Who we are
ARLINOS is a salon management platform operated by THE BLUE BRIDGE CONNECTION CO SRL (Costa Rica, Corporate ID 3-102-880591). We provide booking, client management, point of sale, inventory and marketing tools to beauty salons across Europe and beyond. This policy explains what data we collect, why, and how you can control it.
2. Data we collect
We collect the following categories of data:
- Account data — name, email, phone number, and salon details you provide when you register.
- Booking & client data — appointments, services, and the client records a salon creates to run its own business.
- Payment data — handled by our payment processor; ARLINOS does not store full card numbers.
- Marketing & social media data — when a salon connects a Facebook Page or Instagram Business account (see Section 3), we access the minimum data required to publish and manage posts on their behalf.
- Usage data — basic technical logs (IP address, browser type, pages visited) used for security and reliability.
3. Facebook and Instagram integration
ARLINOS offers an optional feature ("Marketing Studio") that lets a salon connect its own Facebook Page and linked Instagram Business account to create and publish posts directly from ARLINOS.
What we access: when a salon owner authorizes this connection through Meta's official login flow, we request only the permissions needed to identify the connected Page and Instagram Business account and to publish content on their behalf (e.g. pages_manage_posts, pages_read_engagement, instagram_content_publish). We do not request access to personal messages, friends lists, or any data unrelated to the salon's own Page.
How we use it: the connection is used exclusively to publish content the salon creates or approves inside ARLINOS, and to show basic engagement metrics for those posts. We never post without the salon's action, and we never use this access for any purpose other than the Marketing Studio feature itself.
How we store it: the access token Meta issues is encrypted at rest and is never displayed in full or shared with any third party.
How to disconnect: a salon can disconnect Facebook or Instagram at any time from ARLINOS → Marketing Studio → Connections. Disconnecting immediately revokes and deletes the stored access token.
4. Data deletion
You can request deletion of your account and associated data at any time by emailing privacy@bluebridge.es from the email address on your account. We will confirm and complete the deletion within 30 days, except where we are legally required to retain specific records (e.g. issued invoices, for tax purposes).
Facebook/Instagram connections can be removed instantly and independently at any time from within ARLINOS, without needing to delete your whole account — see Section 3.
6. Security
Data is encrypted in transit (TLS) and sensitive credentials, including social media access tokens, are encrypted at rest. Access to production data is restricted to authorized personnel.
7. Your rights
If you are located in the European Union or another jurisdiction with data protection laws, you have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact privacy@bluebridge.es.
8. Changes to this policy
We may update this policy as ARLINOS evolves. Material changes will be communicated to account owners by email. The date below reflects the last update.
9. Contact
THE BLUE BRIDGE CONNECTION CO SRL — San Pedro, Montes de Oca, San José, Costa Rica.
privacy@bluebridge.es