Privacy Policy

Fergro Scheduling provides the scheduling and management technology. Each company using the portal decides which data it needs to deliver its services and may act as controller of its own customers' data; Fergro operates the platform according to the context.

Questions about a specific appointment can also be sent directly to the company the appointment was booked with.

Registration and contact data, such as name, email, and phone; appointment data, such as service, professional, date, time, and notes; account and security data; technical records required for fraud prevention, availability, and support.

When we send email communications, we process the recipient's address, the name when available, the subject, the content required for the communication, technical sending identifiers, and the delivery, read, or failure state when that information is made available by the configured service.

When the Google Calendar integration is enabled, we process OAuth authorizations and technical event identifiers. External appointments are used only as busy/free periods; their titles, participants, and descriptions are not copied into the portal.

Data is used to create and manage appointments, authenticate users, send confirmations, reminders, invitations, and other operational email communications, maintain security, provide support, meet obligations, and improve the product. The applicable basis may vary between contract performance or requested procedures, legitimate interest, legal obligation, and consent.

Cookies and non-essential technologies, including Analytics and marketing, remain blocked until an affirmative choice. Consent can be revoked at any time under “Cookie preferences”.

Essential: keep session, security, language, privacy preferences, and scheduling functions. They cannot be disabled in the manager because the portal depends on them.

Analytics: measures visits and portal usage to improve the service. Marketing: measures campaigns and may support personalized communications. Preferences: stores optional experience choices. These three categories start disabled.

The consent preference is kept in a protected cookie, valid for up to 180 days, and can be changed using the button shown in the corner of the page.

We may use providers of infrastructure, databases, hosting, email, messaging, security, artificial intelligence and, when authorized, Google Calendar and Google Analytics. For email communications, the configured provider receives only the data needed to deliver and track the message. Each provider receives only what is necessary for its function.

The Google Calendar integration, when authorized by a company, accesses only scheduling data (calendars and events) needed to mirror appointments and protect availability. This connection is managed by the company itself and can be disconnected.

Some providers may process data outside the user's country. In such cases, the operation must adopt contractual and technical measures compatible with applicable law.

We keep data for the period necessary for the purposes, legal obligations, fraud prevention, and exercise of rights. Technical records of notifications and email queues may be kept for the operational period configured for recovery and audit. Periods may vary according to the type of record and the configuration of the serving company.

We apply access controls, separation between companies, encryption of sensitive credentials, security logs, input validation, and deletion routines. No system is entirely risk-free, but incidents are handled with containment and investigation.

Under applicable law, you may request confirmation and access, correction, portability, anonymization, blocking, deletion, information about sharing, objection, and consent revocation. Some information may be preserved when there is a legal obligation or another valid basis.

To exercise your rights, use the channels informed by the company responsible for your appointment or write to the privacy contact below. We may ask for minimal data to confirm your identity.