Privacy policy

Who is responsible

When you are a customer or patient of a business, that business decides how your data is used and is the controller. Paralell handles it on the business's behalf to run the service.

For the business team's accounts (sign-in and settings), Paralell is the controller. Contact: (correo de contacto pendiente).

What data we handle

• Customers: name, phone number, the service and date of each appointment, appointment notes, and the messages you write on WhatsApp or on the booking page.
• Consents: when you accepted this policy and which version.
• Business team: name, email, role, and records of important actions (for example, a settings change).
• Google data, only if the business connects its Google Calendar: see the Google section.
• Minimal technical data for security, such as a code derived from the IP address to limit abuse. We do not store the IP address in clear text.
• We do not keep clinical records. The assistant gives no diagnosis and no medical advice.

What we use it for

• To answer your questions and to book, move, or cancel your appointment.
• To send your appointment confirmation and reminders. You can write BAJA to stop reminders.
• To pass your conversation to a person on the team when the assistant cannot help.
• To keep the service secure and prevent abuse.
• We do not sell your data. We do not use it for advertising.

Who we share it with

We use these providers to run the service. They receive only what is needed:

• Supabase: database and sign-in (United States).
• Cloudflare: hosting and running the application.
• Anthropic: the artificial intelligence model that writes the assistant's replies. It receives the conversation text needed to answer.
• Meta (WhatsApp): to send and receive messages.
• Google: only if the business connects its Google Calendar.

Google Calendar

If an administrator of the business connects its Google Calendar, we ask for access to view and create events and to view the list of calendars. We use it only to:

• show the already busy times in the business's agenda,
• create, move, or cancel in Google the events for appointments booked in the system,
• detect changes made in Google so we can avoid double bookings.

How we protect Google data

Paralell Recepción's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We do not use Google data for advertising, we do not sell it, and we do not transfer it to third parties except as needed to run the feature. No person reads Google data unless needed for security, to comply with the law, or with your permission. Access permissions are stored encrypted and cannot be read from the application.

You can remove access at any time at myaccount.google.com/permissions or by writing to us. When you do, we delete the stored permission and the Google Calendar data we keep, within 30 days.

How long we keep it

The business sets how long it keeps conversations and customer data. After that time, the system deletes them. If the business sets no period, the data is kept while it is needed for the service.

Your rights

You can ask for access, correction, or deletion of your data, withdraw your consent, and object to its use. Write to (correo de contacto pendiente) or tell the business. We answer within 20 business days.

Security

We use encrypted connections, role-based access controls, and minimal database permissions. Access permissions for outside services are stored encrypted.

Changes to this policy

If we change this policy, we publish the new version here with its date.