Privacy Policy

1 Who we are

Agendamix is a service provided by MARIO SERGIO SIERRA DELFINO, Brazilian company registration (CNPJ) 63.317.639/0001-15, operating as DelphinosDev. For the data of Agendamix accounts and website visitors, we are the controller.

Contact for any privacy matter: agendamix@agendamixapp.com.br.

2 What data we collect

• Account and business: name, email, phone, password, business name, type of business, country, language, business address and logo.
• Team: name and email of the professionals and users added by the account owner.
• Data the business enters in the app: customers (name, phone, email, notes and service history), appointments, services, packages, waiting list, financial entries and catalog photos.
• Online Booking: name and phone that the business customer provides when booking through the public page, and the replies the customer sends on WhatsApp to confirm or cancel.
• Subscription: tax ID (CPF or CNPJ, in Brazil), plan, amount, subscription status and the Asaas or Stripe identifiers. We never receive or store card details: the card is entered directly on the Asaas or Stripe payment page.
• Technical data: IP address, date and time of access, app version and device system. When app notifications are on, also a device identifier used only to deliver those notifications.
• Website: pages visited and browsing information collected by cookies (see section 7).

We do not collect sensitive data such as racial or ethnic origin, religion, political opinion, health or sex life. Please do not record this kind of information in customer notes either.

3 What we use the data for

• Providing the service you signed up for: calendar, customers, finances, reports, team and Online Booking (performance of contract).
• Charging the subscription and emailing the payment receipt (performance of contract).
• Sending WhatsApp messages to the business customers: confirmation and reminder of appointments booked through Online Booking, when the business uses this feature.
• Sending news and notices about Agendamix by email. You can ask to stop receiving them.
• Providing support when you contact us.
• Keeping the service secure and storing the access logs required by Brazilian law (legal obligation).
• Measuring the advertising campaigns of the website (legitimate interest).

We do not sell personal data and we do not use the data of the business customers for any purpose of our own.

4 Data of the business customers

The customer data that a business enters in the app or receives through Online Booking belongs to that business. For this data, the business is the controller and Agendamix is the processor: we store and process it following the instructions of the business, only to provide the service.

The business is responsible for having a legal basis to process this data and to send messages to its customers, and for answering their requests. If you are a customer of a business and want to access, correct or delete your data, please contact the business first. If needed, you can also write to us and we will forward your request.

5 Who we share data with

We only share data with the partners needed for the service to work, each with its own privacy policy:

We may also share data when required by law or court order, to defend the rights of Agendamix, or in case of sale or merger of the business, keeping the rules of this Policy.

6 International transfers

Some partners, such as Stripe and Google, store data outside Brazil. In these cases, the transfer is made to provide the service you signed up for, with partners that adopt protection measures compatible with the Brazilian law and the GDPR.

7 Cookies on the website

The website uses its own cookies (for example, to remember the chosen language) and cookies from Google Tag Manager and Google Ads, which measure the visits that come from our campaigns. You can block or delete cookies in your browser settings; the website keeps working. The app does not show ads.

8 How long we keep data

• Account data and the data entered by the business are kept while the account exists, including after the subscription expires, so that everything is back when it is renewed.
• When you delete the account, the data is deleted immediately. Server backups are automatically replaced within 7 days.
• Access logs are kept for 6 months, as required by Brazilian law.
• Payment records stay with Asaas or Stripe, under their own rules and tax obligations.

9 Security

We use encrypted connections (HTTPS) between the app, the website and the server, restricted access to the server and database, access keys between our systems and daily backups. No system is completely immune to failures; if an incident that may put you at risk happens, we will notify you and the Brazilian Data Protection Authority, as the law requires.

10 Your rights

At any time, you can:

• confirm whether we process your data and access it;
• correct incomplete or outdated data (most of it can be changed in the app itself);
• ask for anonymization, blocking or deletion of unnecessary data;
• ask for the portability of your data;
• know who we share your data with;
• withdraw consent and stop receiving communications;
• delete your account, in the app or on the Delete account page.

To exercise any right, write to agendamix@agendamixapp.com.br. You can also file a complaint with the Brazilian Data Protection Authority (ANPD) or, in the European Union, with the authority of your country.

11 Minors

Agendamix is made for businesses and is not intended for people under 18.

12 Changes to this Policy

We may update this Policy. The date of the last update is shown at the top of the page and, if the change is important, we will let you know by email or in the app.

13 Data protection officer and contact

Data protection officer: Mario Sergio Sierra Delfino — agendamix@agendamixapp.com.br.