Lashelp Privacy Notice — Facebook and Instagram messages (English)
This page is the English rendering of the parts of the Lashelp Adatkezelési Tájékoztató (Privacy Notice) that cover a salon's connected Facebook Page and Instagram professional account. It follows sections 1.1, 2.15, 4, 7, 10, 11 and 12 of that notice and the Facebook/Instagram part of the Adattörlés (Data Deletion) page. The Hungarian notice is the binding version; where the two differ, the Hungarian text prevails.
Lashelp is an appointment, business and client-communication platform for beauty businesses (salons).
1. Who we are
| Name | Vigh Milán e.v. (sole trader) |
| Registered seat | 9200 Mosonmagyaróvár, Széchenyi István u. 1. 4/14., Hungary |
| Registration number | 57511135 (Ministry of the Interior, register of sole traders) |
| Tax number | 59469522-1-28 |
| support@lashelp.hu | |
| Website | https://lashelp.hu |
We have not appointed a data protection officer; privacy questions go to support@lashelp.hu.
2. Messages from a connected Facebook Page or Instagram account
When a salon connects its own Facebook Page or its professional (Business or Creator) Instagram account to Lashelp, we receive from Meta and store the text and attachments of the messages the client sends (attached files are copied into our own storage), the account ids of the conversation and of the sender, the time of each message, and, when Meta provides them, the sender's name and profile picture, so that the conversation is recognisable in the salon's inbox. At connection we store the app-scoped id of the Facebook user who made the connection and the name and profile picture of the Page or account (the picture is copied into our own storage and deleted when the connection is removed). The access token received from Meta is kept encrypted in the AWS secrets manager.
In the mobile app the connection is started with Facebook's own login module, which opens the Facebook app on the phone. On iOS we ask for tracking permission only so that the Facebook app can open for the connection. Facebook may link this login with data from other apps and websites; Meta's own privacy policy governs that. We do not send an advertising identifier or app-usage events to Facebook.
We use these data only so that the salon can see and answer its own conversations inside Lashelp, next to the client's appointments and history. We do not use them for advertising, profiling or training artificial intelligence, and we do not sell them. A conversation is always started by the client.
For these data the salon is the controller and Lashelp is its processor. The salon can remove the connection at any time under Settings › Integrations; from then on no new message reaches Lashelp. If the salon connects again later, we fetch from Meta at most the latest twenty messages per conversation that arrived since the removal. If the connection breaks, the clients' messages still arrive and are stored, only the salon's replies pause until it reconnects; anything that did not arrive is fetched from Meta after reconnection, at most the latest twenty per conversation. We notify the salon owner of a broken connection by e-mail and, when push notifications are on, by push. The original messages stored at Meta stay in Meta's systems.
A Facebook Page or professional Instagram account can be connected by only one salon at a time. If another salon proves with its own Meta login that it manages the Page or account and takes over the connection, no new message reaches the previous salon through that account, the conversations it already stores stay with it, and it is notified of the takeover.
| Connection state | Do new messages arrive? | What is kept? |
|---|---|---|
| Connected | Yes, and the salon can reply. | — |
| Broken — the access received from Meta expired or was revoked | Yes: the message arrives and is stored. The salon's replies pause until it reconnects. | Every conversation. |
| Disconnected — the salon removed the connection, or it was removed at Meta | No. | Earlier conversations. |
| Taken over — another salon took the account over | No. | Earlier conversations, with the salon that handled them until then. |
3. Who receives the data
Meta Platforms Ireland Limited is an independent controller for the messages of the Facebook Page
and Instagram account the salon connects. Our infrastructure processor is Amazon Web Services EMEA
SARL (38 Avenue John F. Kennedy, L-1855 Luxembourg), which stores the data in Ireland (eu-west-1).
Lashelp uses no advertising network, no external error-monitoring service and no AI-based data
processing. Transfers outside the European Economic Area happen only under Chapter V of the GDPR, as
set out in section 5 of the Hungarian notice.
4. How long we keep it
| Data | Retention |
|---|---|
| The copy of messages received on Facebook and Instagram stored in Lashelp | while the salon's account exists; if the conversation is linked to a client, also deleted when that client is deleted. After the connection is removed no new message arrives; earlier ones are kept |
| Database backups | at most 7 days; deleted data disappear from the backups when that period ends |
5. Deleting the data
The salon can delete its account in the app or the web interface; the process is described on the Adattörlés (Data Deletion) page.
A deletion request sent from your Facebook or Instagram settings. Meta notifies us and we carry the request out as soon as it arrives:
- if you used that account to connect a salon's Facebook Page or professional Instagram account to Lashelp, the connection ends: the stored access key is deleted (permanently after a 30-day recovery period), for Messenger the Facebook user id stored at connection is deleted as well, and from then on no message passes in either direction on that connection;
- if the id in the request matches the id of a participant in a conversation, those conversations and messages are deleted; the image files belonging to them are not deleted by this request, they go when the salon's account is deleted;
- the salon's earlier conversations are kept. For those the salon is the controller, and the copy stored in Lashelp is kept while the salon's account exists, also after the connection is removed; if the conversation is linked to a client, it is deleted when that client is deleted.
If you wrote to a salon on Facebook or Instagram as a client, ask the salon to delete the copy of the conversation stored in Lashelp.
Meta gives you a confirmation code after the request and a link to the Data Deletion page, where the status of the request can be checked with that code. If you have a question about the request, or the connection still works after it, write to support@lashelp.hu and quote the code.
6. Your rights
Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), to object (Art. 21), and to withdraw consent (Art. 7(3)). For data we process for a salon, as a client you exercise your rights with the salon; if the request reaches us, we forward it. Every other request goes to support@lashelp.hu, preferably from the e-mail address of your account. We answer without undue delay and at the latest within one month; the answer is free of charge.
You can lodge a complaint with the Hungarian supervisory authority, the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH): 1055 Budapest, Falk Miksa utca 9-11., postal address 1363 Budapest, Pf.: 9., e-mail ugyfelszolgalat@naih.hu, https://naih.hu. You may also go to court (GDPR Art. 79).