SaloninfraSaloninfra
← Back to site

Terms of Service

1. Parties

The provider is Digital Media Solutions OÜ (registry code 10818411, VAT number EE100726624, registered at Meistri tn 16, 13517 Tallinn, Estonia), trading as Saloninfra. Contact: [email protected].

The tenant is the legal entity, sole trader (FIE) or natural person who creates a Saloninfra company account and operates one or more business locations on the platform ("you").

By creating or continuing to use a Saloninfra company account you agree to these terms.

2. The service

Saloninfra is a SaaS platform for service-oriented small businesses — appointment scheduling and online booking, client management, point-of-sale, communications, optional AI features and related modules. The exact set of features is described in the app and may be added to, changed or removed; we will give reasonable advance notice for changes that meaningfully reduce a feature you actively use.

3. Subscription, fees and billing

Saloninfra is sold on a subscription basis. The current pricing, included quotas (SMS, AI) and add-on rates are shown in your billing area inside the app, which is the binding source. Top-ups for usage-billed components (e.g. SMS, AI tokens) are pre-paid and consumed against the rates published at the time of consumption.

  • Billing currency: EUR.
  • Subscriptions renew automatically until cancelled.
  • Invoices are issued by Digital Media Solutions OÜ.
  • VAT is added where applicable.
  • Card payments are processed by a PCI-compliant third-party payment processor.

You can cancel your subscription at any time from inside the app; cancellation takes effect at the end of the current billing period. We do not refund unused portions of a paid period except where required by law.

4. Your responsibilities

You are responsible for:

  • The accuracy of the data you and your staff put into the platform.
  • Obtaining all consents from your clients required by law for the way you use Saloninfra (booking, marketing, photographs, etc.).
  • The actions of your staff under their user accounts.
  • Keeping login credentials secure and revoking access when staff leave.
  • Complying with applicable law in your jurisdiction (consumer protection, tax, accounting, employment, health and safety, GDPR, etc.).
  • Retaining your own sales/POS invoices for as long as your tax law requires. The platform stores them while you remain a tenant; on termination, exporting and storing those records is your responsibility.

You must not use Saloninfra to send spam, run unsolicited marketing campaigns outside the platform's notification system, or attempt to circumvent the platform's rate limits, security controls or billing.

5. Data protection

You are the data controller of your clients' personal data. We act as a data processor under your instructions. The relationship is governed by the Data Processing Addendum below, which forms part of these terms.

6. Acceptable use of communications

When you send email, SMS, or messages to your clients' online accounts (inbox) through Saloninfra:

  • You confirm that the recipient has agreed to receive communications of that kind from your business.
  • You confirm that the content of the message is true, lawful and not misleading.
  • We may, at our discretion, throttle or refuse delivery to protect the integrity of our sender domains, SMS routes and in-app messaging.

Sending unsolicited mass messages, deceptive content or content that triggers abuse complaints may result in suspension.

7. AI features

Where Saloninfra exposes AI features (suggestions, copy generation, image generation, automated review summaries, etc.) you understand that:

  • The outputs are generated by third-party AI models, may be wrong, and must be reviewed before use.
  • Token usage is metered and billed; the rate is visible in your AI usage area.
  • You must not use AI output in a way that is misleading to your clients (e.g. presenting AI-generated reviews or testimonials as real).

8. Service availability

We aim for high availability. Planned maintenance will be announced in-app where reasonably possible. We do not commit to a specific uptime SLA in this version of the terms.

9. Liability

To the maximum extent permitted by law, our total aggregate liability arising out of or in connection with these terms is limited to the amounts you have paid to us in the twelve (12) months preceding the event giving rise to the claim. We are not liable for indirect, consequential or business-interruption loss.

Nothing in this clause excludes liability for fraud, gross negligence, willful misconduct, or any liability that cannot be excluded by law.

10. Intellectual property

Saloninfra — including the platform software, the brand, the visual identity, the on-screen content we author (in-app guides, defaults, sample data) and the underlying APIs — is owned by us or our licensors and is protected by intellectual-property and database rights. These terms grant you a non-exclusive, non-transferable right to use the service for the duration of your subscription; they do not transfer ownership.

You retain ownership of the content you put into Saloninfra (Customer Data). You grant us the limited right to host, process and transmit that content as needed to provide the service.

If you send us feedback, ideas or suggestions, you allow us to use them to improve the service without obligation or compensation to you.

11. Termination

We may suspend or terminate your account if you materially breach these terms, fail to pay an undisputed invoice after notice, or use the platform in a way that creates legal, security or reputational risk for us or for other tenants.

On termination you may export your data for 30 days from the termination date. After that we may delete it, subject to legal retention obligations (e.g. our own accounting records).

12. Changes

We may update these terms; the current version is always linked from inside the app. If a change materially reduces your rights we will notify you before it takes effect.

13. Governing law and disputes

These terms are governed by the laws of the Republic of Estonia. Disputes are subject to the exclusive jurisdiction of Harju Maakohus (Estonia), without prejudice to any non-waivable rights of consumers under their local law.

These terms are published in English and Estonian. In case of conflict between the two language versions, the English version prevails.

Data Processing Addendum (DPA)

1. Parties and roles

This Data Processing Addendum forms part of the Terms of Service and describes how Saloninfra (Digital Media Solutions OÜ) processes personal data on behalf of the Customer.

The Customer is the controller of the personal data entered into Saloninfra by the Customer or its users, including data about clients, staff and business partners.

Saloninfra is a processor. Saloninfra processes that data only on the Customer's behalf, to the extent necessary to provide the service, and in accordance with the Customer's instructions. The Customer's instructions include, among other things, how the Customer configures and uses the platform.

For Saloninfra users' own account data, Saloninfra is the controller. That processing is described in the Saloninfra privacy policy.

2. Scope and purpose of processing

Saloninfra processes personal data on the Customer's behalf in order to make the platform available and to deliver the agreed services to the Customer.

The data processed may include, among other things:

  • contact and identification data of clients, staff and business partners;
  • bookings, service history and appointment-related information;
  • communications via email, SMS and the in-platform inbox;
  • notes, attachments and photos;
  • loyalty programme data;
  • payment and invoice history;
  • profile pictures and other data needed for sign-in when an external sign-in service is used.

Saloninfra does not process full payment-card data. That is handled by the relevant payment service providers.

Special categories of personal data are not required for ordinary use of the platform. If the Customer chooses to record information such as health or allergy notes on the platform, the Customer is responsible for having an appropriate legal basis and the necessary safeguards in place for such processing.

Data subjects may include, among others, the Customer's clients, staff, representatives, business partners and other individuals whose data the Customer processes through the platform.

Processing lasts for the duration of the Terms of Service. After the account is closed, Saloninfra retains the Customer's data for up to 30 days so the Customer can export it. After that the data is deleted or anonymised, unless retention is required to comply with a legal obligation.

3. Saloninfra's obligations

Saloninfra undertakes to:

  • process personal data only on the Customer's behalf and to the extent necessary to provide the service;
  • ensure that persons who have access to the data are bound by an obligation of confidentiality;
  • implement appropriate technical and organisational security measures, described in more detail at the end of this addendum;
  • engage sub-processors only under the conditions described in section 5 of this addendum and require them to comply with equivalent data-protection obligations;
  • assist the Customer to a reasonable extent in responding to data-subject requests and in meeting other data-protection obligations;
  • after the account is closed, retain the Customer's data for up to 30 days so the Customer can export the data it needs or request that it be made available, and then delete or anonymise the data, unless the law requires it to be retained;
  • notify the Customer without undue delay if Saloninfra becomes aware of a personal-data breach affecting the Customer's data.

4. Customer's obligations

The Customer is responsible for:

  • having a legal basis for processing the personal data it processes through Saloninfra;
  • providing data subjects with proper information about the processing of their personal data;
  • configuring the platform in line with its needs and obligations, including data retention, notifications and marketing consents;
  • responding in good time to data-subject requests addressed to it;
  • retaining sales and accounting documents for the period required by applicable law.

The privacy-notice templates available in Saloninfra are examples. The Customer is responsible for ensuring that its own privacy notice reflects its actual data processing and meets applicable requirements.

After the account is closed, the Customer is responsible for exporting and further retaining the documents it needs.

5. Sub-processors

The Customer authorises Saloninfra to engage sub-processors to provide the service.

Saloninfra:

  • selects sub-processors taking into account their security and data-protection posture;
  • enters into contracts with sub-processors that include data-protection obligations equivalent to those in this addendum;
  • is liable to the Customer for the acts of its sub-processors to the extent provided by applicable law;
  • notifies the Customer of the addition of a new sub-processor or the replacement of an existing one, via the application or by email.

The Customer may, within 30 days of receiving notice, raise a reasoned objection if engaging the sub-processor creates a data-protection risk. If the parties cannot find a suitable resolution, the Customer may stop using the part of the service that depends on that sub-processor.

The current list of sub-processors is available to the Customer in the application and on request from [email protected].

6. Data location and international transfers

The Customer's data is stored in the European Union.

If a sub-processor processes personal data outside the European Economic Area, Saloninfra ensures that an appropriate legal basis is in place for the transfer. Where necessary, the European Commission's Standard Contractual Clauses and additional safeguards are used.

7. Data-subject requests

If Saloninfra receives a request concerning personal data it processes on the Customer's behalf, Saloninfra forwards it to the Customer and does not respond to it independently, unless responding is required by law.

If the platform offers the data subject a relevant self-service option, such as deleting an online account, the data subject can use it directly.

8. Oversight and audits

The Customer is entitled to receive, to a reasonable extent, the information needed to verify compliance with this addendum. As a rule, Saloninfra provides for this purpose relevant documents and a description of its security measures, and where available, independent audit reports or certifications.

If the information provided is not sufficient to assess a justified data-protection risk, the Customer may request a further audit. The need for an audit, and its scope, timing and arrangements, are agreed in advance. The audit must be limited to verifying the processing of the Customer's data and may not be conducted in a way that endangers the confidentiality of other customers' data, the security of Saloninfra's systems, or the normal operation of the service.

The cost of the audit is borne by the Customer, except where the audit identifies a material breach by Saloninfra. These limitations do not apply to inspections by a supervisory authority.

9. Liability and term

Liability arising from this addendum is subject to the limitations of liability set out in the Terms of Service, to the extent permitted by law.

This addendum is in force as long as the Terms of Service are in force. After the agreement ends, those obligations that by their nature must continue after termination remain in force, including the confidentiality and data-deletion obligations.

10. Conflicts and language versions

If there is a conflict between this addendum and the Terms of Service on a matter concerning the processing of personal data, this addendum prevails.

If there is a conflict between the Estonian and English versions, the English version prevails.

Annex 1. Technical and organisational security measures

Saloninfra applies, at a minimum, the following measures:

Access management: role-based access, least-privilege principle, two-factor authentication option, and logging of significant administrative actions.

Encryption: data in transit via TLS 1.2 or a newer protocol, and backups stored in encrypted form.

Environment separation: separation of production, development and test environments, and protection of the application by rate limits and a web application firewall.

Code security: review of changes affecting authentication or data access, protection against common web attacks, and secrets kept separate from source code.

Backups: regular automated backups retained for at least 30 days, and periodic testing of restore capability.

Resilience: managed database with the ability to restore data to an earlier point in time.

Incident management: alert monitoring, documented incident handling, and notification of personal-data breaches without undue delay.

Personnel: confidentiality obligation, role-based access, and removal of access rights as soon as the need for them ends.

Suppliers: security assessment of sub-processors and agreement of equivalent data-protection obligations with them.