Privacy Policy

Practi Agenda is the controller of the personal data collected through this platform. We operate exclusively online, with no physical customer-facing premises. We process data in accordance with Law No. 6.534/20 on Personal Data and Credit Information Protection, and other applicable regulations.

• Account data: name, email, phone and password (stored encrypted).
• Business data: legal name, locations, team, services and hours.
• End-customer data entered by the Business: name, contact and appointment history.
• Usage data: pages visited, actions, IP address and device data, recorded via browser local storage.
• Billing data: needed to process payments (card data is handled by our payment processors; we do not store the full card number).

• Provide, maintain and improve the scheduling service.
• Create and manage your account and authenticate access.
• Process payments and manage subscriptions.
• Send operational communications (confirmations, appointment reminders, service notices).
• Provide support and answer inquiries.
• Comply with legal obligations and prevent fraud or misuse.

We process your data on the basis of: (i) your consent, given when you accept this Policy; (ii) performance of the service contract; (iii) compliance with legal obligations; and (iv) our legitimate interest in operating and securing the Platform. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

We do not sell your personal data. We may share it only with:

• Providers that deliver services to us (cloud hosting, payment processors, email/message delivery), under confidentiality obligations.
• Competent authorities where there is a legal obligation or judicial request.
• The relevant Business, in the case of the end customer's appointment data.

Some of our providers may host data outside Paraguay. In such cases we adopt reasonable contractual and technical safeguards to protect your information with an adequate level of security.

We keep data while your account is active and for as long as needed to meet legal, accounting and claim-defense purposes. Once those periods lapse, we securely delete or anonymize it.

You may request access, update, rectification and deletion of your personal data, as well as object to certain processing, in accordance with Law No. 6.534/20. To exercise them, write to [email protected] . We will respond within a reasonable time.

We apply technical and organizational measures to protect your data: encryption in transit (HTTPS), hashed passwords, access control and per-tenant isolation (multi-tenant). No system is infallible; in the event of a relevant security incident, we will act in accordance with applicable regulations.

We do not use third-party tracking or advertising cookies. For the service to function we use browser local storage (localStorage and sessionStorage) strictly as necessary: to keep your session signed in and remember preferences. This information stays on your device and is not used to profile you. You can clear it from your browser settings, though some features may stop working correctly.

The Platform is intended for people over 18. We do not knowingly collect data from minors without the consent of their legal representative.

We may update this Policy and will notify you of relevant changes. For any questions about the processing of your data, contact us at [email protected] .