Privacy Policy

Last updated: 2026-08-11 | Version: 1.1

Introduction

This privacy policy describes how Anella ("we", "our", "the platform") collects, uses, and protects the personal data of its users and their customers.

Data We Collect

  • Account information: name, email, phone number
  • Customer records: name, phone number, address (created by the user)
  • Appointment data: scheduling, status, history
  • Messaging data: conversations, media, and message context from WhatsApp, Instagram, and Messenger
  • Integration data: channel identity, authorizations, webhooks, and lifecycle state
  • Billing data: subscription status, payment history (payment details are processed by Asaas and never stored on our servers)

How We Use Your Data

  • Providing and operating the appointment scheduling service
  • Sending notifications and reminders via WhatsApp
  • Processing billing and subscriptions
  • Improving the platform and user experience

Meta messaging integrations

We use Meta APIs to authorize and operate WhatsApp Business, Instagram, and Messenger channels for our users. We process authorizations, messages, media, and webhook notifications needed for the shared inbox. Operational credentials are protected and never displayed in the interface.

Meta deauthorization and data deletion

When Meta sends a signed request, we remove the authorization link and operational credentials associated with the person who authorized the app. Disconnecting or removing authorization does not automatically erase shared business history; conversations, media, and historical attribution follow workspace retention and applicable privacy rights.

See the public deletion and status instructions.

Data Sharing

We do not sell personal data. We share data only with providers needed to operate the platform, including Asaas (payments) and Meta (WhatsApp, Instagram, and Messenger). Each provider is subject to its own privacy policy.

Data Retention

We retain user and customer data for as long as the account is active. In compliance with LGPD (Brazilian General Data Protection Law), data is never deleted solely due to billing status. Users may request data export or deletion at any time.

Your Rights

Under LGPD, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Export your data in a portable format
  • Revoke consent at any time

Security

We implement industry-standard security measures including encryption in transit (TLS), secure credential storage, and tenant-level data isolation. API keys and secrets are never exposed in client-side code.

Contact

For privacy-related inquiries, please contact us at privacy@agendadorconsultas.com.br.