Privacy policy

Who we are

Agendorio is an online scheduling platform for service businesses: it lets businesses receive bookings, organize their professionals' schedules and communicate with their clients over WhatsApp. Agendorio is operated by BUILDEV S.A.S. This policy explains what data we process, for what purpose and what rights you have. Any questions can be sent to desarrollo@buildev.co.

What data we process

• Business account: the administrator's name, email address and password (encrypted), and the business data they register: name, type, services, professionals and schedules.
• The business's clients: the name and WhatsApp number the client provides when booking, together with the appointment details (service, professional, date and time).
• WhatsApp messages: when the business connects its line, the messages its clients send to the assistant are processed to book, reschedule or cancel appointments, and are kept as a log.
• Subscription payments: plan, amount, date and status of each payment, and the business's billing details. Payment is made through Bold: we do not receive or store card or bank account details.
• Technical data: server logs needed to operate and protect the service.

Agendorio Android app

The Agendorio Android app (co.buildev.agendorio) connects the business's WhatsApp line with its Agendorio account.

Data the app collects:

• The phone number of the business's line, to identify its account.
• The phone's manufacturer and model, to show in the dashboard which device is connected.
• Battery level and connection status, to alert the business if the phone disconnects.

The app does not access contacts, photos, files, location, microphone, camera, SMS, calls or other apps.

The app works as a network tunnel. While it is active (shown by a persistent notification), the Agendorio server connects to WhatsApp's servers through that phone's internet connection, so the business's line operates from its own phone and its own network.

• The tunnel is encrypted (TLS) between the app and the Agendorio server.
• It only allows connections to WhatsApp domains (whatsapp.net and whatsapp.com) on ports 443 and 5222. It rejects any other destination and any local network address.
• The phone is not used as a proxy for third parties or for any other service.
• The tunnel uses mobile data or Wi-Fi.
• It is only activated after the user accepts it in the app, and it can be paused at any time from the notification or from the app.

How to delete your Agendorio account

1. Write to desarrollo@buildev.co from the email registered in your Agendorio account (or stating the number of the linked line) with the subject "Eliminar mi cuenta" (Delete my account).
2. We will confirm the request by email and delete the account within a maximum of 30 days.

Unlinking the number from the app removes the device's association with the account, but the account is not deleted.

What is deleted: business account data (name, email, services, professionals and schedules), registered clients and appointments, WhatsApp messages and their log, linked devices (number, model and battery) and the Google Calendar connection.

What is kept: subscription payment and billing records, for as long as Colombian law requires for accounting and tax obligations (up to 10 years). Technical server logs are deleted automatically within a maximum of 90 days.

What we use it for

• Providing the service: managing bookings, schedules and reminders.
• Communicating with the business about its account and how the platform works.
• Maintaining security, preventing abuse and complying with legal obligations.

We do not sell personal data or use it for third-party advertising.

Google information

Optionally, the business can sign in with Google and connect its Google Calendar account. In that case Agendorio only accesses:

• Basic profile (name, email and photo) to identify the administrator's account.
• A dedicated calendar in Google Calendar (scope calendar.app.created): the app creates an «Agendorio · business name» calendar in the business's account and can only view, create, update and delete events in that calendar, where it publishes appointments and invites the professionals the business specifies. It has no access to the primary calendar or to any other calendar in the account.

Agendorio's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google data is not used for advertising, is not sold, and is only seen by people when necessary to provide support, with the business's consent, or for security or legal reasons.

Access to Google Calendar is stored encrypted and can be revoked at any time from Ajustes → Google Calendar → Desconectar (Settings → Google Calendar → Disconnect) in the dashboard, or from the Google account permissions. When you disconnect, we delete the stored credential.

Who we share data with

Only with providers needed to operate the service (hosting, database, sending WhatsApp messages, Google when the business turns on those integrations, and Bold to process subscription payments), under confidentiality obligations. Each business only sees the data of its own clients and appointments.

Retention and security

We keep data while the business account is active or for as long as necessary to provide the service and comply with the law. We apply reasonable technical and organizational measures: encryption in transit, credentials encrypted at rest and access control per business.

Your rights

You can request access to, correction or deletion of your data, or withdraw your consent, by writing to desarrollo@buildev.co. If you are a client of a business that uses Agendorio, you can also contact that business directly, as it is responsible for your data as a client.

Changes to this policy

If we change this policy, we will publish the new version on this same page with its update date.