Terms & Conditions (CGV)
Last updated: June 30, 2026
1. Provider
AIgentBird, operated by Andrea Roques, Entrepreneur Individuel — SIRET 88213000800015, [email protected] (“AIgentBird”, “we”, “us”).
2. Definitions
- Service: the AIgentBird SaaS application and related features.
- Customer: the business or professional subscribing to the Service (“you”).
- Subscription: the paid plan you select.
- End-Client Data: personal data of your own clients that you enter into the Service.
3. Purpose & acceptance
These terms govern access to and use of the Service. By creating an account or subscribing, you accept them in full. They prevail over any of your own purchasing terms.
4. Eligibility — professional use only
The Service is offered solely to professionals acting in the course of their business. By subscribing you confirm you are not acting as a consumer.
5. The Service
AIgentBird provides AI-assisted appointment, client base and FAQ management tools for beauty salons, hairdressers, private coaches and similar trades. Features may evolve; we may add, change, or remove features with reasonable notice. The Service is provided on a best-efforts / as-available basis.
6. Accounts
You are responsible for the accuracy of your registration details, for keeping credentials secure, and for all activity under your account.
7. Price, payment & taxes
- Prices: our current plans and prices are available at https://stylbook.com/pricing and https://kikoach.com/pricing/. Prices are stated exclusive of VAT, in euros.
- Payment is processed by Stripe. By subscribing you accept Stripe’s terms. We do not store your card details.
- Billing cycle: you select a monthly or annual billing cycle when you subscribe. Subscriptions are charged in advance and renew automatically for the same period unless cancelled (see §8).
- VAT: prices are exclusive of VAT.
- For business customers established in another EU member state who provide a valid intra-community VAT number, supplies are subject to the reverse-charge mechanism (art. 196 of EU Directive 2006/112/EC): we invoice without VAT and you are responsible for accounting for VAT in your own country.
- For other customers, VAT is applied where required by law.
- Late or failed payment may lead to suspension.
8. Term, renewal & cancellation
The Subscription renews automatically unless cancelled before the renewal date via your in-app access in Settings → Subscription. Cancellation stops future billing. The current running period is not refundable.
9. Your obligations & acceptable use
You agree not to: use the Service unlawfully, infringe third-party rights, attempt to breach security, resell or reverse-engineer the Service, or upload unlawful content. You are responsible for having a lawful basis and the necessary information/consents for any End-Client Data you enter.
10. Data protection
- For account/usage data, AIgentBird is controller — see the Privacy Policy.
- For End-Client Data, AIgentBird acts as your processor under the Data Processing Agreement in Annex A below, which forms part of these terms.
11. Intellectual property
We retain all rights in the Service. You receive a non-exclusive, non-transferable right to use it during your Subscription. You retain all rights in your own data.
12. Availability & maintenance
We may carry out maintenance, ideally with notice for planned downtime. We are not liable for unavailability caused by third parties (hosting, Stripe, WhatsApp, internet) or force majeure.
13. Liability
To the maximum extent permitted by law, our total liability for any claim is limited to the amounts you paid in the 12 months before the claim. We are not liable for indirect or consequential loss (lost profits, data loss not attributable to us, etc.). Nothing limits liability that cannot legally be limited.
14. Confidentiality
Each party keeps the other’s non-public information confidential.
15. Suspension & termination
We may suspend or terminate access for material breach, non-payment, or unlawful use, after notice where practicable. On termination you may export your data for 30 days, after which it is deleted (see Annex A §10).
16. Force majeure
Neither party is liable for failure caused by events beyond reasonable control.
17. Changes to these terms
We may update these terms; we’ll notify you and the updated version applies to renewals/continued use.
18. Governing law & disputes
These terms are governed by French law. The parties will seek an amicable solution; failing that, disputes fall under the jurisdiction of the competent courts of Nanterre (within the ressort of the Cour d’appel de Versailles).
19. Contact
Annex A — Data Processing Agreement (DPA)
A.1 Parties & roles
- Controller: the Customer (the salon/professional using AIgentBird).
- Processor: AIgentBird, operated by Andrea Roques, Entrepreneur Individuel — SIRET 88213000800015, [email protected].
The Processor processes personal data only on the documented instructions of the Controller.
A.2 Subject matter, duration, nature & purpose
- Subject matter: processing End-Client Data to provide the AIgentBird Service.
- Duration: for the term of the Subscription, plus the return/deletion period in §A.10.
- Nature & purpose: scheduling and management of appointments, appointment reminders, client record management, AI-agent in WhatsApp and Telegram.
A.3 Categories of data subjects
- The Controller’s clients (e.g. salons’ or coaches’ customers)
- The Controller’s own staff/employees, where entered
A.4 Categories of personal data
- Identification & contact: names, phone, email.
- Appointment history and booking details.
- Free-text service notes entered by the Controller’s staff — typically non-sensitive preferences (e.g. preferred nail colours, massage pressure, hair products used). Because this field is free-text and not restricted by AIgentBird, it may incidentally contain special-category data (GDPR art. 9), such as allergies, skin/scalp conditions or pregnancy. The Controller is responsible for ensuring it has a valid art. 9 basis (typically the client’s explicit consent) for any such data and for instructing its staff accordingly.
- Photos, as uploaded by the Controller or the Controller’s own staff/employees.
- Payment status (card data handled by Stripe, not stored by AIgentBird).
A.5 Processor obligations (GDPR art. 28.3)
AIgentBird is a small business operated by its two founders. It performs the obligations below taking into account the nature, scope and context of the processing and the resources reasonably available to it — but these obligations, required by GDPR art. 28(3), are not themselves reduced. AIgentBird shall:
a. Process personal data only on the Controller’s documented instructions (these Terms and the Controller’s use of the Service constitute those instructions), unless required otherwise by law — in which case it will inform the Controller where permitted.
b. Ensure that anyone it authorises to access the data is bound by confidentiality.
c. Apply the technical and organisational security measures set out in Appendix 2 (GDPR art. 32).
d. Engage sub-processors only under the conditions in §A.6.
e. Assist the Controller, by appropriate measures and insofar as reasonably possible, in responding to data-subject requests (access, correction, erasure, portability, objection).
f. Assist the Controller with security, breach notification and data protection impact assessments, taking into account the nature of the processing and the information available to AIgentBird.
g. Notify the Controller without undue delay after becoming aware of a personal data breach, and provide the information the Controller reasonably needs to meet its own obligations.
h. At the Controller’s choice, delete or return all personal data at the end of the service (§A.10).
i. Make available the information reasonably necessary to demonstrate compliance with this DPA, as described in §A.9.
A.6 Sub-processors
The Controller gives general authorisation for AIgentBird to engage the sub-processors listed in Appendix 1. Before adding or replacing a sub-processor, AIgentBird will notify the Controller in-app at least 4 days in advance and update its sub-processor list. The Controller may object on reasonable data-protection grounds within that period; if the objection cannot be resolved, the Controller may terminate the affected Subscription. AIgentBird remains responsible for its sub-processors’ compliance.
A.7 International transfers
Some sub-processors (e.g. Stripe) may process personal data outside the EU/EEA. Where they do, the transfer is covered by an adequacy decision or the European Commission’s Standard Contractual Clauses, put in place by those providers.
A.8 Personal data breach
The Processor will document breaches and provide the Controller with the information needed to meet its own notification obligations (to the CNIL/AEPD and to data subjects).
A.9 Audit
AIgentBird will make available the information reasonably necessary to demonstrate compliance with this DPA — normally by providing its security documentation or, where available, a third-party report or certification. If the Controller reasonably requires a further audit, it may request one at most once per year, on at least 30 days’ written notice, during business hours, subject to confidentiality and at the Controller’s own cost.
A.10 Return or deletion of data
On termination, the Processor will, at the Controller’s choice, return or delete all End-Client Data within 30 days, and delete existing copies unless retention is legally required.
A.11 Liability
Liability under this DPA is subject to the limitations in §13 of the Terms, except where the GDPR provides otherwise.
Appendix 1 — Sub-processors
| Sub-processor | Purpose | Location |
|---|---|---|
| Stripe | Payment processing | EU |
| Cloudflare (R2) | Storage of photos & WhatsApp-linked content | EU |
| Meta Platforms (WhatsApp Business API) | WhatsApp messaging integration (where enabled) | US / EU |
| OpenAI | AI processing of WhatsApp messages (the AI agent) | US / EU |
Appendix 2 — Technical & organisational measures (TOMs)
- Data in transit: connections to the Service and to its sub-processors are encrypted in transit (TLS/HTTPS).
- Data at rest: data held by sub-processors (Cloudflare R2, Stripe, OpenAI, Meta) is encrypted at rest by those providers under their own security programmes.
- Incident response: in the event of a personal data breach, AIgentBird will act without undue delay to contain it and notify affected customers as set out in §A.5(g).