Demo — privacy
What happens to what you type
Demo Barber Co. is a demonstration of a booking assistant. The salon, its services, prices and hours are mock data. Please do not enter real personal details.
Your messages
- Your messages are sent to an AI model (Anthropic's Claude API) to work out what you want. Prices, opening hours and free slots come from fixed rules, not from the AI.
- The last few messages of a conversation are stored in the demo's database and erased by a nightly job 30 days after the conversation's last activity. The conversation record itself — its booking step, the chosen slot, the assistant's last reply and a random session id from your browser — is not deleted automatically; it is deleted on request.
- Message ids, kept only to ignore a message delivered twice, are deleted after 30 days.
- A callback request — your contact details and your message — is deleted by the nightly job once it is older than 30 days. A safety limit stops that job, deleting nothing that night and alerting the owner, when it would delete more than a fifth of all callback requests, or more than 200, at once. The limit is checked again every night, so it can keep stopping the job, night after night, until enough new requests arrive or the owner deletes the old ones by hand — and with fewer than five requests stored, none is deleted automatically.
Copies outside the database
- Nightly backups of the database are removed once they are more than 14 full days old, and only on a night whose backup succeeds — so a deleted message or request can remain in a backup for at least 14 days more, typically about 15.
- The booking engine (n8n) keeps a record of each run, which includes your message and the request sent to the AI model, for about 14 days — a setting on the server, separate from the deletion above. The engine's own database, which holds those records, is backed up nightly and its backups are removed the same way as the ones above, so a run record can remain in a backup for at least 14 days more, typically about 15.
- A record deleted on request is removed from the database and the calendar; its copies in the backups and run records above remain until they expire as described.
- The services listed below keep what they receive under their own policies.
Bookings are real
A booking is written to a real Google Calendar — the demo's own — and to the demo's database, with the service, the time, the name you give and the random session id. It is not deleted automatically; it is deleted on request, from the calendar and the database. Cancelling in the chat removes the calendar event; the booking record stays in the database, marked cancelled.
Alerts to the owner
When the assistant hands a conversation to a person, or something fails, the demo's owner gets a Telegram message. It can include the text of your message, and it is outside the automatic deletion above.
Services involved
- Vercel — hosts this website
- Cloudflare — the Turnstile bot check in the chat, and the network in front of the booking endpoint
- Anthropic (Claude API) — reads your message to work out what you want
- Google Calendar — the demo's own calendar, where bookings are written
- Telegram — alerts to the demo's owner
- The demo author's own server — runs the booking engine (n8n) and its database (Postgres)
Some of these services process data outside the EU/EEA, including in the United States; where each third-party service processes data is described in its own privacy policy.
The bot check is Cloudflare Turnstile; Cloudflare describes what it collects in its Turnstile privacy addendum. Nothing is sent over WhatsApp: replies come back in this chat, and the demo's WhatsApp reminders are switched off.
In your browser
A random session id is kept in this tab's session storage so a conversation can continue; it is gone when the tab closes. The site sets no tracking or advertising cookies of its own.
Why, and your rights
The demo processes what you type on the basis of legitimate interest (GDPR Art. 6(1)(f)): demonstrating the booking assistant.
You can ask for access to what the demo holds about you, for its rectification or erasure, or for restriction of processing, and object to its processing — write to the contact below. You also have the right to lodge a complaint with a data-protection supervisory authority.
Questions about your data
Yiğitcan Ük is responsible for this demo’s data (the controller).
Write to salon-demo@yigitcan.uk to ask what the demo holds about you or to have it deleted. The session id is gone once your tab closes, so say what you booked and when, or roughly when you chatted and what you wrote — that is how your records are found.