Privacy policy

Version 2026-10-16 · Last updated: 16 October 2026

1. Controller

Αρσενίου Χρήστος. Contact for personal data matters: info@kanoniseto.gr, phone +306984786516.

2. If you are a business using kanoniseto

• What we keep: name, email, business details (name, phone, address), billing details (VAT no., tax office), settings, subscription and payment details. Card details are handled only by Stripe; we never see them.
• Acceptance of the terms: for every acceptance of the Terms of service and this Policy we keep the version, date and time, IP address and browser, as proof of the agreement.
• Why: to provide the service (contract), for billing, invoices and tax obligations (legal obligation), for the security of the service and to prove our agreement in case of a dispute (legitimate interest).
• How long: while you have an account and up to 90 days after. Accounting records as long as tax law requires. Records of acceptance of the terms up to 5 years after our relationship ends.

3. If you booked an appointment with a business

Your details (name, phone, email, notes, appointments) go to the business you chose, which is the controller; we process them on its behalf to make and manage the booking and to send confirmations, reminders and, if the business turns them on, wishes or a reminder to book again (each with an unsubscribe link). For requests about your data, contact the business or us.

4. Who else processes data (sub-processors)

• Google Cloud / Firebase (Google Ireland Ltd): hosting, database, backups and sign-in; data in the EU (Belgium).
• Stripe (Stripe Payments Europe Ltd, Ireland): subscription payments.
• Google Workspace / Gmail: sending email. If a business connects its own mailbox, messages are sent by its own provider.

Any transfers outside the EU are covered by the European Commission’s Standard Contractual Clauses or another lawful safeguard.

5. Cookies

We only use one essential sign-in cookie (to keep you signed in and protect forms) and your chosen language. We use no advertising or tracking cookies, so we do not ask for cookie consent.

6. Logs

For security and correct operation, our servers temporarily record technical request details (e.g. IP address, time, page). These logs are deleted automatically within 30 days.

7. Your rights

You have the right of access, correction, deletion, restriction, portability and objection. Write to info@kanoniseto.gr and we will answer within one month. You may also complain to the Hellenic Data Protection Authority (www.dpa.gr).

8. Security

All traffic is encrypted (HTTPS). Passwords are handled by Firebase Authentication; businesses’ email passwords are stored encrypted. We keep daily backups.

9. Changes

If we materially change this Policy, we will tell you by email or in the app.