Privacy Policy
Last updated: October 2026
This is a courtesy translation of the Spanish original. If the two differ, the Spanish version prevails.
What data we process, why and on what legal basis, who we share it with, how long we keep it and how you exercise your rights, in accordance with Law 19.628 on the protection of personal data, as amended by Law 21.719.
Who is responsible
The controller of your data is Infinite Waves SpA, tax ID (RUT) 78.271.723-5, with its registered address at Av. Presidente Kennedy 7440, office 701, Vitacura, Santiago, Chile. For anything about privacy, write to us at privacidad@calendizer.ai. We have not appointed a data protection officer: that email is the contact for everything about your data.
Two kinds of data, two roles
We process two broad categories of information. On one hand, we are the controller of the personal data about you, your account and how you use Calendizer. On the other, when a professional uploads personal data about their clients, we process that data on behalf of that professional: there the professional is the controller and Calendizer acts as processor, following their instructions, the Terms of Service and applicable law.
What data of yours we process
Your email and what is needed to authenticate your account: your password, irreversibly encrypted, or your Google account if you sign in with it. Your name, profession, WhatsApp and address, if you fill them in. Technical and usage information: IP address, a browser identifier (the cz_aid cookie), which screens you open and what actions you take, without their content; when you log in, this information is linked to your account. What you write to the assistant and what you send us through Enviar feedback (Send feedback) or by email. Also which version of these texts you accepted and when, and the date of your last activity. You provide this data yourself, or Google does if you sign in with your Google account. The email is necessary to create the account; the rest is optional, and without it some features —such as WhatsApp reminders— are not available.
What data of your clients we process on your behalf
What you upload: name, WhatsApp, email, whether they agreed to receive WhatsApp reminders and since when, notes, appointments, classes, packs and payments. Also the log of the notices we send them: to which number or email, when, and whether it arrived. The professional uploads this data; we do not obtain it from your clients or from other sources.
What we use your data for and on what legal basis
To create and manage your account and provide Calendizer to you, including the notices and reminders you set up: because it is necessary to fulfil the contract you accept with the Terms. To protect the service, prevent abuse, apply usage limits and detect incidents: for our legitimate interest in Calendizer running securely. To improve the product with usage metrics linked to your account: for our legitimate interest, and you can object by writing to us. To write to you about your account, the service and news, including the founder’s emails: for our legitimate interest, and you can unsubscribe with one click from any of them. And to comply with legal obligations. We do not sell your data or use it for targeted advertising. We use your clients’ data only for what the Terms describe.
Health data and other sensitive data
The notes you write about a client may contain sensitive personal data, including data about their health. If you enter this kind of information, you are responsible for having the necessary legal authorization and, where appropriate, the express consent of the data subject. We recommend noting only what is necessary to provide your services; the app reminds you under every notes field while you type. The same applies if you record data of children or adolescents: you need the authorization of their parents or legal representatives.
The assistant and AI
When you use the assistant, your message and the context needed to answer it are sent to OpenAI, which processes them on our behalf. Every message includes the names of your clients, your services and packs, your upcoming and recent appointments and classes, your blocked times and the day’s conversation. A client’s notes are only sent if you ask the assistant about them. Your clients’ saved WhatsApp and email are never sent, but everything you type in the chat —including a phone number or health data— travels as is. We use OpenAI through its developer services, configured so that it does not store conversations; under its terms, that content is not used to train its models, and OpenAI may keep logs for up to 30 days to detect abuse. The AI can be wrong, and Calendizer does not use it to make decisions on its own that produce legal effects or similarly significant consequences for a person. If you prefer not to share this information, you can use the app without the assistant.
Who we share data with
Only with providers that process data on our behalf, under security and confidentiality obligations, and to the extent necessary for their role: Supabase (database and sign-in), Vercel (servers and traffic metrics), OpenAI (the assistant), Resend (sending email), Meta (sending WhatsApp), Google (sign-in with Google, our email and Google Ads conversion measurement) and ImprovMX (receiving our email). We would also hand data to an authority when the law requires us to. If we add or change a provider, we will update this list and, if it processes your clients’ data, we will tell you beforehand in the app.
Data outside Chile
Calendizer stores and processes data outside Chile. The database is in the United States (Oregon), and the other providers process data mainly in the United States and, through their own sub-processors, in other countries where they operate. These transfers are made under the contractual clauses included in each provider’s data processing agreements, which provide adequate safeguards. When the Personal Data Protection Agency approves model clauses, we will adopt them. If you want a copy of the applicable safeguards, ask for it at privacidad@calendizer.ai.
How long we keep it
Your account data and your clients’ data, for as long as your account exists. If your account goes a year without activity —no login and no appointments in the last twelve months or upcoming— we delete it, warning you by email one month before. What you delete in the app —a client, a note, an appointment or the whole account— is deleted immediately from active systems and disappears from automatic backups within 7 days. The log of notices sent to your clients and the usage metrics are deleted automatically after 24 months, and the assistant usage log after 13 months. The record of the founder’s emails we have already sent you is kept while your account exists, so we do not send them to you twice. The conversation with the assistant is kept only in your browser, not on our servers. Messages you send us through feedback or email are kept for up to 24 months. We may keep for longer only what a legal obligation requires.
How we protect it
Everything travels encrypted (HTTPS). No database query comes from your browser: it always goes through our server, which verifies who you are and returns only your data. The tables are closed to public access, and an automatic check prevents deploying if any were exposed. We limit usage to prevent abuse, the accounts we use to run the service have two-step verification, and we have an incident response plan.
Your rights
You can exercise the rights the law gives you: access, rectification, deletion, objection, portability and temporary blocking. You can exercise several yourself: edit your profile, delete your account or download your data from Settings (Configuración), under Descargar mis datos (Download my data). For anything else, write to us at privacidad@calendizer.ai. Exercising them is free, and we may ask you to confirm your identity before answering. We answer requests within 30 calendar days, a period the law allows to be extended once by another 30; temporary blocking requests, within 2 business days. If you are not satisfied with the answer, you can complain to the Personal Data Protection Agency.
Your clients’ rights
If a professional’s client wants to exercise their rights, they must go to that professional, who is the controller of their data. The app lets the professional respond: edit or delete the client and download their data. If the request reaches us, we will pass it on to the professional without delay.
If something goes wrong
If we detect a security breach that affects personal data, we will assess its characteristics and the risk to people’s rights, and we will meet the notification obligations that apply to the Personal Data Protection Agency and, where appropriate, to the affected data subjects. If it affects data we process on behalf of a professional, we will also inform them without undue delay and give them the available information they reasonably need to meet their obligations.
Cookies
We use the cookies necessary to keep your session and run the service. We also use a cookie of our own, cz_aid: a random identifier, shared between calendizer.ai and the app, that lasts up to 400 days and is used to measure usage and improve Calendizer; when you log in, it is linked to your account. If you arrive from a Google ad, the Google Ads tag stores a cookie (_gcl_aw, up to 90 days) that lets us know that ad ended in an account and tell Google so. We do not use it to build advertising profiles or to show you ads inside Calendizer, and we use no other third-party technologies for that purpose.
Changes to this policy
If we change something significant, we will tell you by email and in the app at least 30 days in advance. The date above shows the last update.