Privacy Policy
This policy explains what personal information Debora Lovato Beauty collects, how it is used and the choices you have. It covers this website and the private client portal.
Who we are
Debora Lovato Beauty is a skin care, hair removal and massage studio in Springfield, Massachusetts. You can reach us with the contact details at the end of this page.
Information we collect
When you request a visit: your first and last name, your email address, the service you are interested in and your preferred language.
When you become a client: your contact details, the health and skin history forms you fill out, your signed consents, your treatment photos, your check-ins, the messages you send in the client portal and your appointments.
Technical information: like most websites, our hosting providers keep basic server logs such as IP address and browser type. We do not use advertising cookies or tracking tools. Your browser stores your language choice and, for clients, your login session.
How we use it
To reply to your request, to plan and provide your care, to send appointment reminders and messages you have agreed to, to keep the records a licensed practice must keep, and to keep the website and portal secure.
We do not sell personal information and we do not use it for advertising.
Text messages and WhatsApp
If you give us your mobile number and agree to receive messages, we may send you appointment reminders, invitation links, care follow-ups and replies to your questions by text message or WhatsApp. Message frequency varies with your appointments. Message and data rates may apply. Reply STOP to stop text messages at any time, or HELP for help. Agreeing to messages is never a condition of receiving services. We do not share your mobile number or your consent to receive messages with any third party for marketing purposes. Messages are delivered through Twilio, and WhatsApp messages through Meta.
Artificial intelligence
The client portal uses an outside artificial intelligence provider (Anthropic). Information that clients provide in their forms and in the portal, including health and skin history, messages sent to the virtual assistant, check-ins and treatment photos, may be processed by this provider to support their care, for example to answer questions in the portal and to help Debora prepare for sessions. Our AI provider does not use this information to train its models.
The virtual assistant’s replies are generated automatically. The artificial intelligence does not diagnose conditions or make decisions about treatment; those decisions remain with the responsible professional. Clients agree to this in their consent form before using the portal.
Requests sent from this public website are not processed by the artificial intelligence provider.
Photos
Treatment photos are kept private. A client photo appears on this website only when the client has given written permission and Debora has chosen that photo for the website. Photos of intimate areas are never shown publicly.
You can withdraw your permission at any time, and the photo will be removed from the website.
Companies that help us run the service
We share information only with the providers that operate the service for us, and only as needed for their work: website hosting (Vercel), application hosting (Railway), database and file storage (Supabase), email delivery (Resend), text messages and WhatsApp (Twilio), WhatsApp (Meta), artificial intelligence (Anthropic) and Google (calendar for appointments, and the map on the contact page, if you choose to load it).
We may also disclose information when the law requires it.
How long we keep it
We keep client records for as long as you are a client and for the period that record-keeping rules for licensed professionals require. If you sent a request and did not become a client, you can ask us to delete it at any time.
Your choices
You can ask to see, correct or delete your personal information, or withdraw a consent you gave, by writing to the email address below. We will answer within 30 days. Some records must be kept where the law requires it.
Security
Information is encrypted in transit, access is limited to Debora and the providers listed above, and client photos are stored privately. No system is perfectly secure, but we work to protect your information and will tell you if a problem affects it.
Children
This website is not directed to children under 13, and we do not knowingly collect their information online. Services for minors require a parent or guardian.
Changes and contact
We will update this page when our practices change. Questions about privacy can be sent to the email address shown below.
Last updated: October 25, 2026