Last updated: October 15, 2026
Chatity is a software service operated by MINDUNITE SAS, SIREN 990 299 414, registered at 7 Avenue de Fabron, 06200 Nice, France ("Chatity", "MINDUNITE", "we", "us").
Privacy contact: privacy@chatity.io
This Privacy Policy explains how personal data is processed when you use Chatity, visit our website, create a Chatity account, or interact with a business that uses Chatity to communicate with customers and manage appointments.
Chatity may process personal data in different capacities.
When you are a Chatity customer. If you create a Chatity account or subscribe to our services, MINDUNITE SAS generally acts as the data controller for information necessary to operate your Chatity account, provide support, manage billing, secure the service and communicate with you.
When you are a customer of a business using Chatity. Businesses such as beauty salons, wellness professionals and other service providers use Chatity to manage customer communications, bookings and client records. For personal data processed by Chatity on behalf of such a business:
The business determines why your personal data is processed and how long it should be retained. Questions relating to a particular appointment, client record or marketing communication should normally be directed to the business with which you interacted.
Chatity account information: name; email address; business name; account credentials; subscription and billing information; support communications; account settings.
End-customer information processed for businesses: name; phone number; email address; communication channel identifiers; appointment date and time; selected service; selected staff member; booking status; customer preferences provided to the business; visit and booking history; communications with the business through Chatity.
Communications: messages exchanged through Chatity website chat, WhatsApp, Instagram, telephone (voice assistant) and other connected channels. Where supported, communications may be processed by artificial intelligence systems in order to understand requests, answer questions and perform actions requested by the user or configured by the business.
Technical information: IP address; browser and device information; timestamps; authentication events; logs; security and fraud-prevention data.
Integration information: where a business connects third-party services, Chatity may process technical identifiers and access credentials necessary to operate the integration. Integration credentials and tokens are protected using appropriate technical and organisational security measures.
Businesses using Chatity may also use customer data for customer relationship management and, where legally permitted, marketing communications.
Where MINDUNITE SAS acts as a controller, processing may rely on: performance of a contract or steps requested before entering into a contract; compliance with legal obligations; our legitimate interests in operating, improving and protecting Chatity; consent where required by law.
Where Chatity acts as a processor for a business, the relevant business is responsible for determining the appropriate legal basis for its processing activities.
Information necessary to respond to a booking request, create or manage an appointment, send a confirmation, request information necessary for the service or send an appointment reminder may be processed as part of providing the service requested by the customer. Such communications are distinct from promotional or advertising communications.
Businesses using Chatity may use the platform to send marketing communications. Where applicable law requires consent, promotional electronic communications will only be sent where the recipient has provided valid consent. Consent must be freely given and can be withdrawn at any time (for example by replying STOP on WhatsApp).
In circumstances where applicable law permits communications to existing customers concerning similar services without prior consent, recipients must still be informed and given a simple way to object.
Chatity provides tools intended to allow businesses to record marketing preferences and opt-outs. The business remains responsible for determining whether a particular marketing communication is lawful.
Chatity uses artificial intelligence technologies to assist businesses with customer communications and operational tasks. Depending on the configuration of the service, AI may: understand customer requests; answer questions using information provided by the business; suggest available appointment times; create or modify bookings; identify returning customers; assist with follow-up communications.
Businesses remain responsible for configuring Chatity appropriately and reviewing the use of the service in their operations. Chatity is not intended to provide medical diagnoses, medical treatment decisions or other professional medical advice.
Standard Chatity booking and CRM functionality is not intended for storing medical records or other special categories of personal data unless a specific feature expressly supports such processing.
Users should not provide health information, diagnoses, medication information or other sensitive information through general Chatity communication fields unless specifically requested through an authorised workflow provided by the relevant business. Where sensitive data processing is enabled, the relevant business is responsible for ensuring that an appropriate legal basis and safeguards are in place.
Personal data is not retained indefinitely. Retention periods vary according to the purpose and type of data.
| Data | Retention |
|---|---|
| Chatity business account data | Duration of the customer relationship and a limited period thereafter where necessary for legal, security or dispute-resolution purposes |
| End-customer records, booking history, communications | Determined by the relevant business (controller) through its configured retention settings and legal obligations; Chatity may automatically delete or anonymise data according to that configuration |
| Marketing consent evidence | For as long as proof of consent or opt-out is required |
| Integration credentials | While the integration remains active; deleted or invalidated when the integration or account is terminated |
| Financial records | Periods required by applicable law |
| Security logs | Only for a period appropriate to their purpose |
A Chatity business may delete client data through the available account tools. A person wishing to exercise rights concerning data held by a particular salon or service provider should normally contact that business directly. Chatity assists businesses in responding to legally valid data-subject requests.
Chatity account holders may request deletion of their account by using the available account tools or by contacting privacy@chatity.io. Deletion does not apply where information must be retained to comply with a legal obligation, establish or defend legal claims, prevent fraud or meet other lawful retention requirements. See also our Data Deletion page.
We use selected service providers to operate Chatity, which may include providers of cloud infrastructure, databases, artificial intelligence services, communication platforms, email and messaging, telephony, payment processing, monitoring and security. Where Chatity acts as a processor, such providers may act as subprocessors.
A current list of subprocessors is available at https://chatity.io/subprocessors.
Where personal data is transferred outside the European Economic Area, Chatity uses an appropriate legal transfer mechanism where required, such as an adequacy decision, Standard Contractual Clauses, or another transfer mechanism permitted under applicable law. Additional safeguards may be implemented where necessary.
Chatity implements technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure and destruction. These measures may include access controls, encryption in transit, authentication, logging, backups, monitoring and secure software development practices. No internet-based system can guarantee absolute security.
Where required by applicable law, Chatity will notify affected business customers without undue delay after becoming aware of a personal-data breach involving data processed on their behalf. The relevant data controller is responsible for determining whether notification to a supervisory authority or affected individuals is required.
Depending on applicable law, individuals may have rights including access, rectification, erasure, restriction, portability, objection, and withdrawal of consent where processing is based on consent.
For data relating to a booking or client relationship, requests should normally be submitted to the business with which you interacted. You may also contact privacy@chatity.io — we will assist the relevant business where Chatity processes the data on its behalf. You also have the right to lodge a complaint with a supervisory authority, in France the CNIL (www.cnil.fr).
Chatity uses automation and AI to assist with communication and booking workflows. Unless expressly stated otherwise for a specific feature, Chatity is not intended to make solely automated decisions that produce legal effects or similarly significant effects concerning individuals.
Chatity may integrate with third-party platforms such as messaging, social-network, payment or booking services. Use of those third-party services may also be governed by their own privacy policies and terms.
Chatity is primarily intended for use by businesses and their customers. Businesses that offer services to minors are responsible for ensuring that any collection or processing of minors' data complies with applicable law.
We may update this Privacy Policy when our services, legal obligations or data-processing practices change. The current version and its effective date will always be published on this page.
MINDUNITE SAS — SIREN 990 299 414 — 7 Avenue de Fabron, 06200 Nice, France.
Privacy contact: privacy@chatity.io