Terms of Service

1. Acceptance of terms

By signing up for, accessing or using PmuGo, you confirm that you have read, understood and accepted these Terms and our Privacy Policy. If you do not agree with any of its clauses, you must not use the Service.

If you act on behalf of a Studio, you represent that you have the legal authority to bind that entity and you accept that the obligations under these Terms apply to both you and the entity.

2. Description of the service

PmuGo is a comprehensive management platform for micropigmentation Studios that includes: scheduling and appointments, client management, medical and pigment history, digital medical forms, signed informed consents, before/after photos, post-procedure follow-ups, automatic reminders, payments and billing, packages and guarantees, and a dedicated client portal.

The Service processes personal data —including special-category data (health, biometric data and, where applicable, images)— in accordance with Regulation (EU) 2016/679 (GDPR) and the data protection rules applicable in the Studio’s jurisdiction.

3. Accounts and responsibility

The Studio is responsible for keeping its access credentials confidential and for all activity under its account. You must notify PmuGo immediately of any unauthorized use or security compromise.

The Studio is the controller of its clients’ data. PmuGo acts as data processor, in accordance with Article 28 GDPR, and will only process data following the Studio’s documented instructions and to provide the Service.

The Studio agrees to obtain all necessary informed consent from its clients —including consent to the procedure, to health-data processing and to image capture— before recording it on the platform. PmuGo provides tools (medical forms and signed consents) but does not verify the lawfulness of consent collection.

4. Payments and subscriptions (Whop)

The Service is offered as a recurring subscription. Plans, prices and conditions are shown on the main page and may change with 30 days’ notice. Billing is handled through Whop, our payment provider, which acts as data processor limited to the data needed to process the charge.

By activating a subscription you authorize Whop to charge the corresponding amount according to the plan’s billing period (monthly or annual). Renewals are processed automatically unless cancelled before the billing period. Refunds are handled in accordance with Whop’s policy and applicable law.

5. Medical data and privacy

Given that the Service processes health data (special category under Article 9 GDPR) —including medical forms, Fitzpatrick skin type, allergies, conditions, before/after photos and pigment records with batch numbers—, processing takes place under the following safeguards:

• Encryption in transit (TLS 1.2+) and at rest (at the infrastructure provider’s storage level).
• Logical isolation per Studio through row-level security policies (RLS) in the database.
• Audit logging of sensitive actions (access to medical history, data export or erasure).
• Retention of medical data for the period legally required of the Studio (typically 6 years under applicable health regulations), unless the client exercises her right to erasure and no legal retention duty exists.

Full processing details are set out in our Privacy Policy.

6. Studio obligations

The Studio agrees to:

• Use the Service lawfully, respecting applicable health, consumer and data protection regulations.
• Inform its clients about the processing of their data and obtain informed consent before any procedure or image capture.
• Not enter into the platform data of individuals who have not given their consent, nor use the Service for discriminatory or unlawful purposes.
• Keep contact information up to date and notify PmuGo of any security incident that may affect client data.
• Be liable to its clients and third parties for damages arising from use of the Service, including procedures performed and information recorded.

7. Intellectual property

PmuGo retains all intellectual property rights in the Service, including its code, design, trademarks, logos and documentation. No rights other than those expressly set out in these Terms are granted to the Studio.

Data entered by the Studio (client records, appointments, forms, photographs, pigments) belongs to the Studio. PmuGo only processes it as processor to provide the Service. When the relationship ends, the Studio may export its data and request its erasure following the procedure described in the Privacy Policy.

8. Limitation of liability

PmuGo provides the Service “as is” and “as available”, without express or implied warranties. To the maximum extent permitted by law, PmuGo will not be liable for:

• Indirect, incidental or consequential damages arising from use of the Service.
• Loss of data arising from causes beyond our control (infrastructure provider outages, force majeure, Studio errors).
• Damages arising from misuse of the Service by the Studio, including procedures performed without consent or with incomplete medical information.
• Breaches by third parties (Supabase, Whop, Google, Resend) of their duties as data processors.

PmuGo’s aggregate liability for any claim relating to the Service will be limited to the amount paid by the Studio in the 12 months preceding the triggering event.

9. Cancellation

The Studio may cancel its subscription at any time from the account settings section or by contacting support. Cancellation takes effect at the end of the current billing period.

After cancellation, the Studio will have 30 days to export its data. Once that period has elapsed, PmuGo will delete the account and associated data, except for financial and legal records whose retention is required by applicable law (which will be kept for the legal period and then anonymized).

PmuGo may suspend or terminate a Studio’s account for breach of these Terms, with reasonable notice except in cases of serious breach or risk to data security.

10. Governing law

These Terms are governed by the laws of the jurisdiction where the Studio operates. For any dispute, the parties submit to the competent courts of that jurisdiction.

For claims relating to data protection, clients or Studios may contact the Spanish Data Protection Agency (AEPD, www.aepd.es).

If you have questions about these Terms, contact us at support@pmugo.com.