Privacy policy

The data controller is [Nome legal do responsável pela Fadevo], tax number [NIF], with address at [Morada profissional] ("Fadevo", "we").

For any privacy question, write to privacy@fadevo.com.

• Account: name, email, password (stored encrypted, we can never read it) and the two-step code, if you enable it.
• Barbershop: name, site address, addresses, phone numbers, emails, opening hours, services, prices, photos, texts and settings you enter in the dashboard.
• Team: name, photo, role, bio and Instagram of each person you add, and the email of anyone you invite to the dashboard.
• Billing: plan, subscription status, payment history and billing details (name, address, tax number). Card or bank details are collected and stored by Stripe, never by us.
• Referrals: who referred Fadevo to your barbershop and the barbershops you referred.
• Contacts: what you write to us in quote, domain or plan change requests.
• Technical data: access and error logs (IP address, browser, date and time) and the cookies listed in section 7.

• Providing the service (creating and maintaining the account, site, dashboard, bookings and automatic emails): performance of the contract.
• Charging the subscription and issuing invoices: performance of the contract and compliance with legal (tax) obligations.
• Sending account and subscription notices (for example, the end of the free trial or a failed payment): performance of the contract.
• Security, abuse prevention and fixing errors: legitimate interest in keeping the service safe and working.
• Referral programme: performance of the programme terms.
• Answering requests and messages: pre-contractual steps or legitimate interest.

We do not sell personal data or use it for third-party advertising.

We use providers that process data on our behalf (processors), under contracts that require them to protect it:

• Supabase (database and authentication), with data hosted in Frankfurt, Germany.
• Vercel (hosting of the site and dashboard).
• Resend (sending emails).
• Umami (anonymous visit statistics for Fadevo's public pages, without cookies).
• Stripe Payments Europe, Ltd., Ireland (subscription payments and billing).
• When you connect your own domain, the domain registrar used to buy or connect it.

Some of these providers are United States companies. When data is transferred outside the European Union, this is done under the EU-US Data Privacy Framework or standard contractual clauses approved by the European Commission.

We may also have to disclose data to authorities when required by law.

• While the account and subscription are active.
• After the subscription ends, we keep the barbershop's data for 12 months so you can come back without losing anything, and then delete it (you can ask us to do so sooner).
• Invoices and payment records: 10 years, as required by Portuguese tax law.
• Technical and security logs: only for as long as needed for the purposes above.

You can ask us for access to, rectification or erasure of your data, restriction of or objection to processing, and data portability. You can change much of your data directly in the dashboard.

To exercise these rights, write to privacy@fadevo.com. We reply within one month.

You also have the right to lodge a complaint with the Portuguese data protection authority (CNPD), at www.cnpd.pt, or with the authority of your country.

We only use cookies and local storage needed for the service to work, with no advertising or third-party analytics cookies:

• Session (sb-…): keeping you signed in to the dashboard and the client area.
• Dashboard preferences (fadevo_brand, fadevo_shop): remembering the selected barbershop.
• Language (fadevo_lang): remembering the language chosen on the sign-in and sign-up screens, for 1 year.
• Preview (fadevo_preview): showing the site before it is published, for 1 hour.
• Referral (fadevo_ref, fadevo_amigo): remembering, for 60 days, the referral or invite link you opened, to credit the referral.
• Browser local storage: remembering small choices, such as closing a notice.

On Fadevo's public pages (home page, beta, contact and legal pages) we count visits with Umami, anonymously and without cookies: we see aggregated numbers (pages viewed, where the visit came from, country, device type), never who the person is. Barbershop sites and the dashboard are not counted.

Data always travels encrypted (HTTPS), passwords are stored encrypted and access to data is restricted by rules in the database itself, so each barbershop only sees its own data.

If we change this policy in a meaningful way, we will let you know by email or in the dashboard before the changes take effect.