Privacy Policy

The Controller of personal data collected through this website is Memento Hair Milano, Via Negrin 12 — 36043 Camisano Vicentino (VI), Italy. VAT IT03751430244.

Contacts: mementohairmilano@gmail.com — PEC: a.maniscalco@pec.it.

Contact and form data (name, email, phone, salon/brand info, messages), payment data handled by Stripe, content you upload for AI reports, and navigation data (IP, logs, browser, OS). In the world of Memento you can talk to an AI-powered chat (it says so itself): your messages are sent to Anthropic only to generate the reply and are not stored on our servers; to prevent abuse, each generated reply is counted together with an irreversible pseudonym of your IP address (a truncated hash that cannot identify you). Please do not enter personal data in the chat.

Respond to your requests, deliver services and process payments, generate AI reports, answer in the world chat (service performance; anti-abuse counting under legitimate interest), send operational communications, ensure site security, and — only with your consent via the cookie banner — analytics and marketing through Google and Meta pixels. See the Cookie Policy.

Supabase, Vercel, Stripe, Anthropic (Claude — AI reports and the world chat; API data is not used by Anthropic to train its models), Make.com, WhatsApp/Meta, Gelato, Google, Meta. Data is not sold.

Some processors operate in the United States under Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.

Leads up to 24 months from last contact; tax records 10 years; AI report content up to 12 months after delivery; world-chat messages not stored (chat usage counts with pseudonym up to 12 months); technical logs 6 months; cookie preferences 12 months.

Access, rectification, deletion, restriction, portability, objection, withdrawal of consent. Write to mementohairmilano@gmail.com. You may lodge a complaint with the Italian Data Protection Authority (Garante Privacy).

The service is not directed to children under 16.

HTTPS, access control for the admin area, GDPR-compliant processors.

This notice may be updated. The current version is always published here with the date above.