Privacy Policy
Last updated 5 November 2026
Glametria helps beauty studios reach their own past clients by text and email. This page explains what we hold, why we hold it, and how to get it removed. It is written to be read, not to be survived.
Who we are
Glametria (“we”) provides software and operator services to independent beauty studios. When a studio uses Glametria, that studio is the controller of its own client data and we are its processor: we act on the studio’s instructions and do not use its client list for our own purposes.
What we collect
From studio owners and operators
- Name, email address, and the studio details entered during onboarding.
- Business settings: timezone, booking link, postal address, sending number, average ticket.
- Sign-in records and an audit log of actions taken inside the product.
From a studio’s client list, on that studio’s instruction
- Client first and last name, email address, mobile number.
- Appointment dates (first visit and last visit), visit counts, and any tags the studio applies.
- Whether the client agreed to receive marketing texts, when, and through which form or checkbox.
- Message history: what was sent, whether it was delivered, opened, or tapped, replies received, and opt-outs.
We do not collect payment card numbers, health or treatment records, or any special-category data. Studios must not upload it.
Why we use it
- To send the messages a studio asks us to send, to the people who may lawfully receive them.
- To decide who is eligible: consent status, suppression lists, quiet hours, and frequency limits.
- To report honestly on results, by comparing visit dates before and after outreach.
- To keep the service secure, debug faults, and meet our legal and carrier obligations.
Text messaging consent
All of the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
Consent to receive marketing texts is collected by the studio, or through a Glametria opt-in page, and is used only to send messages from that one studio. It is never sold, rented, shared with other studios, or passed to advertisers or data brokers. Replying STOP to any message removes that number immediately and permanently for that studio.
Who we share it with
We use a small number of processors, each bound to act only on our instructions:
- Supabase — database and authentication hosting (United States).
- Vercel — application hosting (United States).
- Twilio — text message delivery and inbound replies.
- Resend — email delivery.
We do not sell personal information. We do not share it for cross-context behavioural advertising. We disclose data only when the law requires it, and we will tell the studio unless we are prohibited from doing so.
How long we keep it
Client lists and message history are kept for as long as the studio is a customer, and for 90 days after the account closes so the studio can ask for an export. Suppression and opt-out records are kept indefinitely, because deleting them would risk texting someone who asked us to stop. Audit logs are kept for two years.
Your choices
- Stop texts: reply STOP to any message. Reply HELP for help.
- Stop emails: use the unsubscribe link in the footer of any email.
- Access, correction, deletion: email privacy@glametria.com, or ask the studio that holds your details. We respond within 30 days. Where the studio is the controller we will pass your request to them and assist.
- California and other state rights: you may request access, correction, deletion, and a list of disclosures, and you will not be treated differently for asking.
Security
Data is encrypted in transit and at rest. Access is restricted to the studio’s own account and to Glametria staff who need it to run the service. Provider credentials are encrypted with a separate key. Every studio’s data is isolated at the database level, not merely by application code.
Children
Glametria is not intended for anyone under 18, and we do not knowingly collect data about children.
Changes
If we change this policy in a way that affects how we use your data, we will update the date above and tell studio owners by email before the change takes effect.