Privacy policy
Color Lab is run by Mateusz Truszczyński, trading as Promptli, a sole proprietor registered in Poland. Address: Lipcowa 21, 80-178 Gdańsk, Poland. EU VAT ID: PL9570988579. REGON: 383277762. Email: matt@colorlabapp.com.
This policy explains how we use personal data about visitors to colorlabapp.com, people who contact us or book a demo, and the people who use Color Lab accounts. We follow the EU General Data Protection Regulation (GDPR), because we are based in Poland.
It does not cover the information salons keep about their own clients in Color Lab. For that data the salon is in charge (the controller) and we only process it on the salon's instructions, under our Data Processing Agreement. If you are a salon client, please contact your salon.
What we collect and why
| Information | Why we use it | Legal basis | How long we keep it |
|---|---|---|---|
| Website visits: IP address, browser, pages viewed | To deliver the website and protect it from attacks (handled by our host, Cloudflare) | Legitimate interests | Short-term security logs kept by Cloudflare |
| Your cookie choice | To remember whether you accepted or rejected cookies | Legal obligation (recording consent) | 12 months |
| Google Ads measurement: cookie identifiers, ad click IDs, pages viewed, clicks on “Book a demo” | To see which of our ads bring salons to the site | Consent (only if you click Accept) | Up to 90 days in cookies; see our Cookie policy |
| Demo bookings: name, email address, salon, chosen time | To arrange and hold your online demo (booked through Proton Calendar) | Steps before a contract; legitimate interests | Up to 2 years after our last contact, unless you become a customer |
| Emails and messages you send us | To answer you and give support | Legitimate interests; contract | Up to 2 years after our last contact, or as long as you are a customer |
| Customer accounts: names, email addresses, phone numbers, salon name and address, logins, user roles and settings | To provide Color Lab, give support and manage the contract | Contract | While you are a customer, then up to 90 days so you can export your data |
| Billing: invoices, business details, payment records | To invoice and keep accounts | Legal obligation | As long as tax and accounting law requires (usually 5 to 6 years) |
| App technical data: app version, device model, platform, sync status, error reports | To support, update and fix the apps | Legitimate interests | While the account is active |
Cookies and ad measurement are described in our Cookie policy.
We send marketing emails only to customers, people who asked us for a demo, and people who agreed to receive them. Every marketing email lets you opt out. We do not sell personal data and we do not use it for automated decisions with legal or similarly significant effects.
Who we share it with
We use these service providers. They process data only to provide their service to us:
- Cloudflare: hosts and protects this website.
- Supabase: database, sign-in and file storage for Color Lab, hosted in Frankfurt, Germany.
- OVHcloud: the sync server for the tablet app (Frankfurt, Germany) and a backup copy of the database (Gravelines, France).
- Google: our email (Google Workspace) and, only with your consent, Google Ads measurement.
- Proton: the calendar used to book online demos (Switzerland).
- Twilio: sends SMS appointment reminders when a salon uses them.
- Fakturownia: issues our invoices (Poland).
We may also share data with professional advisers, with authorities when the law requires it, and with a buyer of the business. We will tell customers before their contract moves.
Where your data is stored
Color Lab data is stored in the EU (Germany and France). Where a provider processes data in the United States, we rely on the EU–US Data Privacy Framework for certified providers, or on the EU standard contractual clauses.
How we protect it
Data is encrypted in transit, our hosting providers encrypt it at rest, each salon can only reach its own data, access to our systems is limited and protected, and we keep backups.
Your rights
You can ask us for a copy of your data, or ask us to correct it, delete it, limit how we use it, send it to you or another provider in a usable format, or stop using it, including for direct marketing at any time. Where we rely on consent, you can withdraw it at any time; for cookies, use “Cookie settings” at the bottom of every page. Email matt@colorlabapp.com. We will reply within one month.
If you are unhappy with how we use your data, you can complain to the Polish data protection authority (uodo.gov.pl). We would appreciate the chance to help first.
Children
Color Lab is a service for businesses and is not aimed at children.
Changes
We will update this page when our use of data changes, and email customers about important changes.