Privacy Policy
Last updated: September 23, 2026
At Wenzy, we handle personal, operational, and integration data, including information received from Google Workspace APIs, under principles of transparency, confidentiality, security, and data minimization. This policy explains what data we access or collect, how we use, store, share, and delete it, and what controls you have when using our customer service, booking and appointment automation platform.
1. Data we collect
We may collect account and contact details, hotel or business information, calendar and appointment settings, integration settings, content processed within the platform, and technical usage data required to operate, maintain, and protect the service.
2. How we use information
We use information to provide the platform, respond to requests, automate guest and booking workflows, sync integrations, improve product reliability, prevent abuse, and comply with legal or contractual obligations.
3. Google Workspace and Google Calendar data we access
When an authorized administrator connects Google Calendar, Wenzy accesses the account's primary email; the primary calendar identifier, name, timezone, and capabilities; free/busy availability without retrieving titles, descriptions, or content from unrelated events; and Agenda-managed events, including their identifiers, status, date, time, attendees, and Google Meet or Calendar links. We also receive OAuth access and refresh tokens to maintain the authorized connection.
4. How we use Google data
We use Google data exclusively to verify the organizer account, check availability, validate the calendar and its timezone, create Google Meet links, create, synchronize, reschedule, and cancel meetings, add attendees, display Agenda status, and send related notifications. We do not use unrelated event content or Google data for secondary purposes that are incompatible with these user-visible features.
5. Google data storage and security
OAuth access and refresh tokens are encrypted at rest with separate, versioned keys. Data is transmitted over HTTPS, secrets are kept out of source code, access is restricted through authorized roles, and credentials are redacted from operational errors and logs. We retain only the calendar and event identifiers, synchronization state, meeting data, and links required to provide and protect the service.
6. With whom we share, transfer, or disclose Google user data
We share, transfer, or disclose Google user data only in these cases: (a) meeting details, with the meeting's organizer and attendees; (b) with service providers that process data on Wenzy's behalf, only to the extent essential to operate the platform — our cloud infrastructure provider (Render, which hosts the application and database) and our transactional email provider (Hostinger, which delivers meeting notifications) —, bound by confidentiality obligations and not authorized to use the data for their own purposes; and (c) with competent authorities when required by law. We do not share, transfer, or disclose Google user data with any other third party, or for purposes other than the user-facing features described in this policy. In particular, we do not sell, rent, or transfer it to advertising platforms, data brokers, or information resellers, or to artificial-intelligence model providers, and we do not use it for advertising, retargeting, credit assessment, or lending. We do not allow humans to read Google data except with explicit consent for support, for security, to comply with law, or when data is aggregated and anonymized for internal operations.
7. Google Limited Use and AI models
Wenzy's use of information received from Google Workspace APIs adheres to the Google User Data Policy, including the Limited Use requirements. We do not use or transfer Google Workspace or Google Calendar data to create, train, improve, or fine-tune generalized or non-personalized artificial intelligence or machine-learning models. We do not build independent databases or permanent copies of Google data for purposes outside the user-authorized Agenda features.
8. Retention, disconnection, and deletion
We retain OAuth tokens while the integration remains active. When Google Calendar is disconnected, Wenzy stops future access, initiates grant revocation, and deletes encrypted token copies after revocation completes. Local meeting records are not automatically deleted on disconnection and are retained until manual deletion or anonymization, or as needed to provide the service, meet legal or contractual obligations, resolve incidents, and maintain security audit records. You can remove access from your Google Account and request deletion of data controlled by Wenzy through our Data Deletion page or by emailing info@wenzy.co.
9. AI, conversations, and ownership of other data
Content processed by our AI agents is used to deliver the services contracted by the customer. We do not use conversations between businesses and their customers (guests, patients or clients) to train public third-party models. Unless required by law, operational context and business data remain under the customer's control. This section does not expand the permitted use of Google data, which is governed by the specific restrictions above.
10. Booked appointments and end-customer data
When a business uses Wenzy to book appointments on WhatsApp, Instagram or Messenger, Wenzy processes, on that business's behalf, its end customers' name, phone number and general reason for the appointment, together with the date, time, assigned professional and appointment status in Wenzy's calendar. The business acts as data controller and Wenzy as data processor. Wenzy does not request or store medical records, diagnoses, test results or other detailed health data, and recommends that businesses do not request them in chat. Reminders are sent on WhatsApp using templates approved by the business, and Meta bills those messages directly to the business's own business portfolio. If the business syncs its calendar with Google Calendar, Google data is governed by sections 3 to 8. End customers exercise their rights of access, correction or deletion with the business that booked the appointment; Wenzy handles those requests following the business's instructions and applicable law, such as Colombia's Law 1581 of 2012, Mexico's Federal Law on the Protection of Personal Data Held by Private Parties, Panama's Law 81 of 2019 and Brazil's LGPD.
11. Site analytics and cookies
We use Microsoft Clarity to analyze interactions with public pages and improve the experience. Clarity may use cookies or other measurement technologies. Google Workspace data obtained through OAuth is not sent to Clarity.
12. Changes to this policy
We will keep this policy current. If we change how we access or use Google data, we will notify users before applying the new use and obtain renewed consent when required.
13. Your rights and contact
You may request access, correction, deletion, anonymization, or information about your data by emailing info@wenzy.co. We will verify the requester's identity and handle each request under the applicable contractual relationship and law.
Data deletion requests
If you need to revoke an integration or delete data received from Google Workspace, Google Calendar, Facebook Login, Meta, or another connected source, use our public data deletion request page. It explains the process, required information, and contact channel.
Request data deletionRelated legal pages
Other language versions