Data deletion

How to make a request

Send an email to adam@musito.pl with the subject "Data deletion". Include the salon's name and the email address the account was created with — both are needed to confirm the request comes from someone entitled to make it.

Receipt is confirmed within 3 business days and the request is carried out within 30 days.

If you are a salon's client

The controller of your data is the salon where you book your appointments, not musito. Send your deletion request to the salon directly; the salon deletes it in the system, and I remove it from backups within the periods described below.

If the salon does not respond, write to adam@musito.pl and I will help you reach the controller.

Data from connected Facebook and Instagram accounts

When a salon connects musito studio to its Facebook Page and the Instagram professional account linked to it, musito stores: the Page's and the Instagram account's identifiers and names, the permissions granted, and an access token, kept encrypted.

Read but not stored: the profile details, statistics (insights) and the list of recent posts. They are fetched when the salon opens the screen that shows them.

Stored only when the salon chooses to: for a post published from musito studio, the identifier and link the platform returns; photos the salon imports from its own Facebook or Instagram into its musito photo library, with their caption and link; and posts the salon imports as examples of its writing style, as text with their link.

The connection can be removed at any time: in musito studio under My studio → Online profiles → Disconnect, or on Facebook in the Business Integrations settings. Disconnecting in musito studio revokes musito's access at Meta and deletes the token, identifiers and names immediately.

Imported photos and style examples are the salon's own content and stay in its account until the salon deletes them, or until the account is deleted. A style example the salon removes keeps its text, so that the next import does not suggest the same post again; to have it erased completely, make a request by email.

A deletion request for any of this data can be made by email, as described above.

Data from a connected Google Business Profile

The same principle applies: the location's identifier, name and links and an access token are stored, and disconnecting the profile deletes them immediately. Access can also be revoked on Google's side, in your account settings.

What exactly is deleted

Deletion covers: the salon's user accounts, client records together with visit history, notes and photos, the calendar, the service catalogue, the photo library and posts, and everything stored for connected accounts.

Data is removed from the production database immediately, and from backups within 30 days as they rotate.

What cannot be deleted

Accounting records — invoices issued to the salon — are retained for the period required by Polish tax law. This concerns the salon's own business data only, never its clients' data.

Export before deletion

Before an account is deleted you may request an export of the data in a commonly used format. Exports are prepared free of charge within 14 days.