Privacy Policy

1. Data Controller

The data controller is Irony studio s.r.o., IČO 23991992, with registered office at Hartigova 1016/45, Žižkov (Praha 3), 130 00 Praha, Czech Republic, operator of the Picassa platform ("we", "us"). Contact: [email protected].

2. What Data We Collect

When you use Picassa, we may process the following categories of personal data:

• Account data: name, email address, profile photo, role (client or professional)
• Booking data: appointments, calendar events, open slots, capacity, service types, notes
• Communication data: chat messages and metadata between clients and professionals
• Location data: business addresses, place information, and map coordinates when you use discovery features
• Portfolio and public pages: photos, descriptions, and content you publish
• Optional integrations: Instagram content if you connect your account
• Notifications: push notification tokens, email preferences
• Technical data: device type, IP address, logs, and cookies required for the service

3. Purpose of Processing

We process your data to provide the Picassa platform: enabling discovery of professionals, booking and calendar management, in-app messaging, public profiles, and related notifications.

4. Legal Basis (GDPR)

We rely on the following legal bases under the GDPR:

• Performance of a contract — to provide the service you signed up for
• Legitimate interest — to improve security, prevent abuse, and operate the platform
• Consent — for optional features such as push notifications or Instagram import, where applicable

5. Third-Party Processors

We use trusted third-party services to operate Picassa:

• Supabase — authentication and database hosting
• Google Maps — location and map display
• Meta / Instagram — optional content import when you connect your account
• Resend — transactional email delivery
• Apple (APNs) and Google (FCM) — push notifications

6. Retention and Security

We retain personal data for as long as your account is active and as required by law. We apply appropriate technical and organizational measures to protect your data, including encryption in transit and access controls.

7. Your Rights

Under the GDPR, you have the right to access, rectify, erase, restrict, or port your data, and to object to certain processing. You may also withdraw consent where processing is consent-based. To exercise your rights, contact [email protected]. You may lodge a complaint with your local supervisory authority.

8. Cookies

We use essential cookies and local storage for language preference and session management. With your consent, we load Google Analytics (Google Ireland Limited) to measure website traffic. You can withdraw consent at any time by clearing this site's browser data.