Terms of Service
Version 1.0 · effective 8 October 2026
These Terms set out the rules for using SpaDesk – an app for running a spa, massage, beauty or wellness salon, available at app.spadesk.pl and in the Android app – and for concluding and terminating agreements with Companies and Users. This is an English translation of the Polish Regulamin; the Polish version is the binding one.
§ 1. General provisions
- These Terms set out the type and scope of the services provided electronically through SpaDesk, the conditions for providing them, including the technical requirements, the conditions for concluding and terminating agreements, and the complaints procedure. They are the terms referred to in Article 8 of the Polish Act of 18 July 2002 on Providing Services by Electronic Means.
-
The services are provided by:
Alex Maher Netskyes
ul. Telefoniczna 23D, 91-728 Łódź, Poland
NIP (tax ID) 7272820962
Email: kontakt@spadesk.pl
- SpaDesk is intended only for entrepreneurs within the meaning of Article 431 of the Polish Civil Code who use it in the course of their business or professional activity, for example to run a salon. SpaDesk is not intended for consumers.
- These Terms are available free of charge at spadesk.pl/regulamin – before the agreement is concluded and while it lasts – in a way that allows them to be downloaded, stored and printed. The English version (spadesk.pl/terms) is a translation; in case of any discrepancy, the Polish version prevails.
§ 2. Definitions
Capitalised terms in these Terms mean:
- Provider – Alex Maher Netskyes, whose details are given in § 1(2);
- SpaDesk – the web application available at app.spadesk.pl, together with the app for Android devices that displays the same web application, and the website spadesk.pl;
- Service – the service provided electronically by the Provider, described in § 3;
- Company (the customer, “Usługobiorca”) – an entrepreneur that has concluded the Agreement with the Provider and uses SpaDesk in the course of its business;
- Account – an individual's personal account in SpaDesk, which they sign in to with an email address and password or with a link sent to that address;
- User – an individual with an Account who uses SpaDesk on behalf of the Company or Companies they belong to, such as a salon's owner, employee or co-worker;
- Company Account – a separate part of SpaDesk (in the app: “company”) in which the Company keeps its data, with one or more locations and access for its Users;
- Owner – a User with the owner role in a Company Account, in particular the one who created it; among other things, the Owner can invite Users, give them roles and permissions, export data and delete the Company Account;
- Agreement – the agreement for the provision of the Service concluded between the Provider and the Company on the terms of these Terms;
- Data Processing Agreement – the agreement on entrusting the processing of personal data concluded between the Company and the Provider, available at spadesk.pl/dpa;
- Company Data – data, including personal data, that the Company and its Users enter into SpaDesk or collect with it, for example in forms;
- Price List – the price list for the Service published on the spadesk.pl website;
- Ad Platforms – Meta (Facebook, Instagram) and Google (Google Ads);
- GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation).
§ 3. Type and scope of the Service
- The Provider provides, electronically, a Service consisting of making SpaDesk – an app for running a salon – available and of storing and processing Company Data to the extent needed to use its features.
-
Within SpaDesk, the Company may use in particular the following modules:
- Finances – income and expenses, discounts, till days and vouchers;
- Clients – client records with contact details, notes, tags and marketing consents, and sending email and text messages to clients;
- Employees – data about the salon's employees;
- Work plan – shift schedules and time off;
- Contracts – contracts with employees, including employment contracts and salary;
- Tasks;
- Stock;
- Forms – such as client questionnaires, which may include health questions;
- Marketing – creating and managing ads on the Company's ad accounts connected to SpaDesk, with optional ad copy suggestions prepared by artificial intelligence (§ 8);
- Dashboard – the overall state of the finances.
- The Service also includes maintaining Accounts, creating Company Accounts with one or more locations, inviting Users and giving them roles and permissions, exporting Company Data and deleting a Company Account.
- The Provider develops SpaDesk and may add, change and withdraw its features. Before withdrawing a feature the Company uses, the Provider gives advance notice in the app or by email.
- Browsing the spadesk.pl website is free of charge and requires no Account.
§ 4. Technical requirements and risks
-
Using SpaDesk requires:
- a device with internet access;
- a current version of Chrome, Edge, Firefox or Safari with JavaScript and cookies enabled;
- an active email account;
- to use the Android app – a device running Android 8.0 or newer.
- SpaDesk stores on the User's device only the cookies needed for signing in, and in the browser's storage (localStorage) the chosen language and theme and the last company and location chosen. It uses no advertising or analytics cookies. Details are in the Privacy policy.
- Using services over the internet involves typical risks, such as malware, phishing (obtaining sign-in details by impersonating well-known services) or an Account being taken over by someone who has learned the password or gained access to the User's mailbox. To reduce them, the User should use up-to-date software, use a strong password that they don't use for other services, and sign out of devices that other people use. The Provider never asks for your password.
§ 5. Account and conclusion of the Agreement
- Using SpaDesk requires an Account. An Account is created by giving an email address and setting a password, or by signing in with a link sent to the email address given. The email address must be confirmed.
- By creating an Account, the User accepts these Terms; at that moment a free account agreement for an indefinite period is concluded. A User who created their Account before these Terms took effect accepts them in the app.
- A User who creates a Company Account becomes its Owner. By creating a Company Account, they declare that they are authorised to act on behalf of the Company, and conclude on its behalf the Agreement on the terms of these Terms and – by ticking the relevant box – the Data Processing Agreement.
- By creating a Company Account, the Owner declares on the Company's behalf that it uses SpaDesk in the course of its business, to run that business, and that the Agreement is of a professional nature for it.
- The Agreement is concluded for an indefinite period.
- Details given when creating an Account and a Company Account should be true and up to date.
§ 6. Users, roles and sign-in details
- The Owner may invite other Users to the Company Account, such as employees and co-workers, give them roles and permissions, including limiting their access to selected locations, and remove their access.
- A Company Account may include several locations. One User may belong to several Companies and use them from a single Account.
- The Company is responsible for the acts and omissions of its Users in SpaDesk as for its own, and for giving them roles and permissions appropriate to their tasks.
- The User keeps their sign-in details – the password and sign-in links – confidential and does not share them with others. Everyone who uses SpaDesk should have their own Account.
- If a User suspects that someone unauthorised has accessed their Account, they promptly change the password and notify the Provider at kontakt@spadesk.pl and the Owner.
§ 7. Rules of use and the Company's content
- The Company and Users use SpaDesk in accordance with the law, these Terms and good practice.
- It is prohibited to provide unlawful content and to take actions that may disrupt SpaDesk or compromise its security, in particular attempts to gain unauthorised access to data or Accounts, to bypass security measures, to introduce malware or to overload SpaDesk.
-
The Company is responsible for the content and data it enters into SpaDesk and for having a legal basis to
process them. In particular, the Company:
- sends clients marketing messages by email and text only when it has their consent required by the Polish Electronic Communications Law of 12 July 2024 (Prawo komunikacji elektronicznej), and respects its withdrawal;
- collects health data, for example in notes and questionnaires, only on the basis of the data subject's explicit consent, unless it has another legal basis under Article 9(2) GDPR;
- meets its information obligations towards its clients, employees and other people whose data it enters.
- SpaDesk is not a fiscal cash register and does not replace the Company's statutory obligations, in particular recording sales and issuing fiscal receipts, keeping accounts and tax records, and settling taxes. The Company is responsible for meeting them.
- Unlawful content can be reported to kontakt@spadesk.pl. The Provider may disable access to content whose unlawful nature it has learned of from an official notice or a credible report, and informs the Company of this.
§ 8. Marketing and messages to clients
- The Company may connect its own ad accounts on the Ad Platforms to SpaDesk to create and manage ads. The ads are published in the Company's ad account and on its behalf.
- The Ad Platforms charge the Company directly for running ads, under the agreements the Company has concluded with them. The Provider is not a party to those agreements or payments.
- The Company is responsible for the content and settings of its ads and for complying with the Ad Platforms' terms and advertising policies. The Provider is not responsible for the Ad Platforms' decisions, such as rejecting an ad or restricting an ad account, or for the results of ads.
- At a User's request, SpaDesk can suggest ad copy prepared by artificial intelligence (OpenAI). For this, the Provider sends only a description of the advertised service, its price, the Company's name and its town – it sends no client data. Suggestions may contain errors; the Company checks them before publishing and decides itself whether to use them.
- The Company may send email and text messages to its clients from SpaDesk. The messages are sent on the Company's behalf and on its instructions; the Company is responsible for their content and choice of recipients. Delivery also depends on network operators, email providers and the recipient's settings.
- Sending text messages may be subject to a monthly allowance set out in the Price List or shown in the app. Once the allowance is used up, it may not be possible to send more text messages that month.
§ 9. Fees
- Fees for the Service are set out in the Price List published on the spadesk.pl website. If no Price List has been published or it provides for no fees, the Service is free of charge.
- The Provider notifies the Company by email or in the app of the introduction of fees or a change in their amount at least 30 days before the date from which they are to apply. A Company that does not accept the fees may terminate the Agreement before that date by deleting its Company Account (§ 15(1)); it pays no new fees until the deletion. If the Company does not terminate the Agreement, the new fees apply to it from the date given.
- The payment deadline and method are set out in the Price List.
- Fees for running ads charged by the Ad Platforms (§ 8(2)) are not fees for the Service.
§ 10. Availability of SpaDesk
- The Provider makes every effort to keep SpaDesk running without interruption but does not guarantee its continuous availability.
- The Provider may carry out technical work that temporarily limits access to SpaDesk. Where possible, it announces planned work in advance – in the app or by email.
- The Provider is not liable for interruptions and disruptions caused by third parties, in particular hosting and infrastructure providers, the Ad Platforms and email and text message providers, or for interruptions resulting from force majeure or from causes on the Company's side, such as its equipment or internet connection.
§ 11. Liability
- The Provider is liable to the Company for non-performance or improper performance of the Agreement on general principles, subject to the limitations in this section.
- The Provider is not liable for lost profits or indirect damage, including loss of revenue, clients or reputation.
- The Provider's total liability to the Company, whatever its basis, is limited to the fees the Company paid for the Service in the 12 months before the event that caused the damage. If the Service was free of charge for the Company during that period, this liability is limited to PLN 500.
- The limitations in paragraphs 2 and 3 do not apply to damage caused intentionally or to other cases in which the law does not allow liability to be limited.
-
In particular, the Provider is not liable for:
- the content and lawfulness of Company Data entered by the Company and its Users;
- the consequences of a User sharing their sign-in details with others;
- the acts and decisions of the Ad Platforms and the results of ads;
- the consequences of the Company failing to meet the obligations referred to in § 7(3) and (4);
- the interruptions and disruptions referred to in § 10(3).
- Liability for processing personal data entrusted by the Company is governed by Article 82 GDPR and the Data Processing Agreement.
§ 12. Complaints
- Complaints about the Service can be sent by email to kontakt@spadesk.pl.
- A complaint should include the Company's name or the User's name, the Account's email address, a description of the problem and the date it occurred. If information needed to deal with the complaint is missing, the Provider will ask for it.
- The Provider deals with a complaint within 14 days of receiving it and replies by email to the address it was sent from.
§ 13. Personal data
- The Provider processes Users' personal data and the data of Companies as SpaDesk's customers, including the data and settings of Company Accounts, as a controller, as described in the Privacy policy.
- The Provider processes personal data that the Company enters into SpaDesk – in particular data about its clients, employees and co-workers and about people who fill in its forms – on the Company's behalf as a processor, under the Data Processing Agreement. The Company is the controller of that data.
- In matters of protecting personal data entrusted by the Company, the Data Processing Agreement takes precedence over these Terms.
§ 14. Rights to SpaDesk and the Company's content
- The rights to SpaDesk, including its software, design and name, belong to the Provider. For the term of the Agreement, the Provider grants the Company and its Users a non-exclusive, non-transferable licence to use SpaDesk – in a browser and through the Android app, including installing it on a device – to the extent needed to use the Service in accordance with these Terms.
- The Company retains its rights to Company Data and to the content it provides, such as logos, photos and ad copy. For the term of the Agreement, it grants the Provider a free, non-exclusive licence to use them solely to the extent needed to provide the Service, covering reproducing and storing them in SpaDesk, displaying them to Users and – for ads – passing them to the Ad Platforms and making them publicly available in the Company's ads.
§ 15. Termination of the Agreement and deletion of data
- The Company may stop using the Service at any time. To terminate the Agreement, the Owner deletes the Company Account in Settings → Company → Delete company.
- The deletion takes effect after 30 days. Until then, the Owner can undo it (Cancel deletion). When that period ends, the Agreement terminates and all Company Data, including files, is permanently deleted and cannot be recovered.
- Before deleting the Company Account, the Owner can download a full export of the Company Data in JSON format: Settings → Company → Export all data.
- A User may at any time ask for their Account to be deleted by writing to kontakt@spadesk.pl from the Account's email address. The Provider deletes the Account within one month and confirms this by email; at that moment the account agreement terminates. A Company Account's only Owner must first delete the Company Account or hand it over to another User.
- The Provider may terminate the Agreement or an account agreement with 30 days' notice, sent by email. During the notice period, the Owner can download an export of the Company Data.
-
The Provider may terminate with immediate effect the Agreement – if the Company or one of its Users grossly
breaches these Terms – or an account agreement – if the User grossly breaches them. A gross breach includes in
particular:
- providing unlawful content;
- the actions referred to in § 7(2), such as attacks on SpaDesk;
- failing to pay fees due despite a payment reminder and the expiry of the deadline set in it.
- If the Provider terminates the Agreement, the Company Data is permanently deleted 30 days after the termination date; until then, at the Owner's request, the Provider provides an export of the Company Data.
§ 16. Changes to these Terms
- The Provider may change these Terms for important reasons, in particular a change in the law, a change in the scope or manner of providing the Service, such as adding new features or providers, security reasons, or a change in the Provider's details.
- The Provider announces changes by email or in the app at least 14 days before they take effect, making the text of the new version available.
- A Company that does not accept the changes may terminate the Agreement before they take effect by deleting its Company Account (§ 15(1)); the previous version of these Terms applies to it until the deletion. A User who does not accept the changes may ask for their Account to be deleted (§ 15(4)).
- Users accept each new version of these Terms in the app. Using SpaDesk after the date the changes take effect means accepting them.
§ 17. Final provisions
- The Provider contacts Users by email, at the address linked to their Account, and in the app; in matters concerning a Company, it contacts the Owner. The Company keeps the Owner's email address up to date. Correspondence to the Provider should be sent to kontakt@spadesk.pl.
- The Agreement and the account agreements are governed by Polish law.
- Disputes arising from the Agreement are resolved by the common court competent for the Provider's address given in § 1(2).
- If any provision of these Terms proves invalid or ineffective, the remaining provisions remain in force.
- These Terms are effective from 8 October 2026.