Cookie Policy

This Cookie Policy explains the cookies and similar browser-storage technologies used on the AesthetOS public website and inside the authenticated AesthetOS application, the purposes they serve, and the choices available to you.

It applies to visitors of the public website and to users of the AesthetOS application. It should be read together with the Privacy Policy, which explains how personal data is handled more broadly.

AesthetOS is software that supports aesthetic clinics and medical practices in managing their operations. AesthetOS is not a medical service provider. This Cookie Policy does not modify the Privacy Policy.

Cookies are small text files placed on your device when you visit a website. Similar technologies include browser local storage and session storage, which can also store information in your browser.

These technologies can be used to keep you signed in, remember your preferences, or — when optional — measure how you interact with the site and advertising.

Not every technology described here is a cookie in the strict sense; some are browser-storage entries. They are grouped together here because they serve a similar function and are subject to similar user controls.

Based on an audit of the public website and the authenticated application, AesthetOS uses the following technologies:

• Base44 platform authentication and session storage (browser local storage);
• a transient checkout-plan selection entry (browser local storage);
• an onboarding guard entry (browser session storage);
• first-party preference storage for interface theme and language (browser local storage);
• an interface sidebar-state cookie (where the sidebar component is used);
• first-party product analytics limited to the demo-request feature;
• Google Ads conversion tracking (Google gtag.js), only when you accept marketing;
• third-party services described in Section 8.

No clinical, patient, treatment, clinical-imaging, consent or billing data is stored in browser storage to support cookie preferences. Cookie consent state stores only your category choices.

These technologies are required for the site and application to function and cannot be disabled:

• Base44 authentication and session storage — entries such as the access token, app identifier and related parameters stored in browser local storage. Purpose: authenticate you, maintain your session and operate the application. Retention: for the duration of your session and until you log out.
• Checkout-plan selection — a transient entry carrying your selected subscription plan from the pricing page to checkout. Retention: until checkout completes or the entry is removed.
• Onboarding guard — a session-storage entry used to avoid repeated checks during onboarding. Retention: for the browser session only.

These technologies do not require consent and continue to work regardless of your cookie choices.

These first-party technologies remember your interface preferences. They are not used for analytics, advertising or tracking:

• Interface theme — remembers your light or dark mode preference (local storage). Retention: until you clear it.
• Public website language — remembers your selected website language (local storage). Retention: until you clear it.
• Application interface language — remembers your selected application interface language (local storage, also synced to your user profile when signed in). Retention: until you clear it.
• Sidebar state — remembers whether the interface sidebar is open or collapsed (a cookie), where the sidebar component is used. Retention: for the session.

Under applicable law, these first-party preference entries do not require consent. They are active by default. You can clear them at any time through your browser settings.

AesthetOS uses a first-party product-analytics capability limited to the demo-request feature. When you submit a demo request, a single event ("demo request submitted") is recorded by the platform. This does not involve a third-party analytics provider, does not place a third-party analytics cookie, and does not process patient or clinical data.

No third-party web-analytics provider (for example Google Analytics) is used. If this changes, this Cookie Policy will be updated and an optional analytics category will be added with your consent where required.

AesthetOS uses Google Ads conversion tracking (Google gtag.js, tag ID AW-18434375373) to measure the effectiveness of advertising. This technology is optional and is only loaded after you explicitly accept the marketing category.

When enabled, it may set or read cookies and similar identifiers through Google's infrastructure to attribute conversions such as sign-ups, checkouts and contact submissions. Provider: Google Ireland Limited / Google LLC. Retention: according to Google's retention settings for the relevant tags.

A local entry ("_aw_signup_fired_…") may also be stored in your browser to avoid counting the same sign-up conversion more than once. Retention: until cleared.

Until you accept the marketing category, the Google Ads tag is not loaded and no marketing cookies are set. Rejecting marketing cookies is as easy as accepting them.

Depending on the features used, the following third parties may be involved:

• Base44 — the platform that hosts and operates the AesthetOS service (infrastructure, authentication, database and file storage).
• Stripe — subscription billing. Payment is handled through Stripe's hosted checkout; AesthetOS does not store full card details.
• Google Fonts — the Inter typeface is loaded from Google's font service for typography. This involves a request to Google's font infrastructure.
• Google Ads (gtag.js) — only when you accept the marketing category, as described in Section 7.

Each provider processes information only to the extent necessary to provide its service and subject to its own terms and the applicable safeguards described in the Privacy Policy.

The technologies described above serve the following purposes:

• authentication and session management (essential);
• operation of the application and checkout flow (essential);
• remembering interface and language preferences (functional);
• measuring advertising effectiveness (marketing, optional).

Retention periods are indicated in each section. Essential and functional entries are kept for as long as needed for their purpose and are otherwise governed by your browser settings. Marketing cookies follow the retention set by the relevant provider when the category is enabled.

Where the General Data Protection Regulation (GDPR) and applicable Romanian data protection law apply:

• strictly necessary technologies are used on the basis of providing the service you request and the legitimate interests of operating and securing the platform;
• functional preference entries are first-party and used to provide the interface you request;
• marketing technologies are used only on the basis of your consent (Article 6(1)(a) GDPR).

You may withdraw your marketing consent at any time using the Cookie Settings link in the footer; the marketing tag will then no longer load.

You can manage your cookie preferences at any time:

• open Cookie Settings from the footer of any public page;
• enable or disable the optional marketing category;
• save your choice — it is remembered across visits and you will not be asked again on every page.

Essential technologies remain active regardless of your choice. Your browser settings also allow you to inspect and clear stored cookies and local storage entries at any time.

If you have accepted marketing cookies, you can withdraw that consent at any time by opening Cookie Settings and turning the marketing category off, then saving. The Google Ads tag will not load on subsequent visits.

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. Strictly necessary technologies continue to operate.

This Cookie Policy is provided for transparency about browser technologies. It does not replace the Privacy Policy, which remains the primary description of how personal data is handled.

AesthetOS handles patient and clinical information within the authenticated application. No analytics, advertising pixels or unnecessary third-party tracking technologies are introduced on authenticated clinical pages. Patient records, clinical images, treatment details and consent records are not exposed to analytics or marketing providers.

No claim of GDPR compliance is made beyond the measures actually implemented. Statutory rights and mandatory provisions of applicable law remain unaffected.

For questions about this Cookie Policy or cookie-related matters:

Synaptrix AI S.R.L.

Romania

Email: support@synaptrixai.io

Privacy: privacy@aesthetos.io

Company website: https://synaptrixai.io

Product website: https://aesthetos.io