Privacy Policy

1. Our two roles

We are the data controller for the data of people who create an account or visit our website.

For the data of each Business's End clients (the people who book appointments), we act as data processor under section 25 of Law 25,326: we process it on behalf of the Business, only to provide the service and on its instructions. The Business is the controller towards its clients.

2. What data we process

Account data: name, email, phone, business details, locations, team and each user's role.

End clients' data entered by the Business or when booking: name, phone, email, appointment history, attendance and notes.

Technical data: IP address, device, browser, usage and security logs.

Activity log: which team user (id and email) made each relevant change in the Business's account, for security and auditing. Kept while the Business exists.

Payment data: processed by MercadoPago or Stripe. We do not store your card numbers.

3. What we use it for

To provide the service (schedule, bookings, reminders on behalf of the Business), charge for plans and modules, provide support, keep the service secure and prevent fraud, comply with legal obligations and improve the product using aggregated or anonymized information.

We will only send you marketing communications if you agree, and you can unsubscribe at any time. We do not sell personal data.

4. Legal basis

We process data with your consent, to perform our contract with you, to comply with legal obligations or under any other exception in section 5 of Law 25,326.

5. Sensitive data

Some Businesses (for example, medical practices or mental health professionals) may enter health data, which is sensitive data under the law. In those cases the Business is responsible for obtaining its patients' express consent and entering only what is strictly necessary. We apply enhanced security measures and never use that information for other purposes.

6. Who we share it with

With providers that help us deliver the service and may only use the data for that purpose: cloud infrastructure (Google Cloud / Firebase), messaging (Meta WhatsApp Business and email providers) and payment processors (MercadoPago, Stripe).

We may also share it when a competent authority requires it by law.

7. International transfers

Some of our providers host data outside Argentina (for example, in the United States or the European Union). In those cases we adopt the safeguards required by the regulations, such as the model contractual clauses approved by DNPDP Provision 60/2016.

8. Security

We use encryption in transit and at rest, role-based access control, per-Business data isolation and activity logs, following the security measures recommended by the AAIP (Resolution 47/2018). No system is infallible: if an incident affects your data, we will let you know.

9. How long we keep it

While your account is active. If you close your account or a business, we keep the data for up to 30 days (so a mistaken closure can be undone) and then delete it; backups are erased within up to 30 additional days. We may keep information required by tax or accounting rules for longer.

10. Your rights

You can exercise your rights of access, rectification, update and deletion (sections 14 to 16 of Law 25,326) by emailing hola@schedulesmanager.com. Access is free of charge at intervals of no less than six months, unless a legitimate interest is shown. We answer access requests within 10 calendar days and rectification or deletion requests within 5 business days.

You can also export your data from the app at any time. If you are an End client of a Business, please direct your request to the Business; if you write to us, we will forward it and help them respond.

11. Supervisory authority

The AGENCY FOR ACCESS TO PUBLIC INFORMATION, as the Supervisory Authority of Law No. 25,326, is empowered to handle complaints and claims filed by anyone whose rights are affected by non-compliance with the rules on personal data protection.

Database registered with the AAIP National Registry of Personal Databases under No. [REGISTRATION NUMBER].

12. Cookies and local storage

We use cookies and browser local storage that are necessary for the service to work: keeping you signed in and remembering your language, theme and location. We do not use advertising cookies. If we add analytics tools in the future, we will say so here and ask for your consent where required.

13. Minors

Schedules Manager is intended for people aged 18 or over. If a Business enters data about clients who are minors, it is responsible for having their parents' or guardians' authorization.

14. Changes to this policy

We may update this policy. We will publish the current version on this page and, if the changes are material, notify you by email or in the app.

15. Contact

For privacy questions or to exercise your rights, email us at hola@schedulesmanager.com.