Privacy notice

What does this page do before I sign in?

It sets no cookies and loads no analytics, advertising pixels, tag managers or third-party fonts. Nothing that identifies you is sent to us until you choose to sign in. Two things do happen, and you are entitled to know about both:

• A random number is written to your browser’s local storage the first time the page loads. It only picks which headline you see and is never sent to us. Clearing this site’s data in your browser erases it.
• When you tap the sign-up button, or the links that start your own space or take you to the developer site, the page tells us a tap happened. That message carries no cookie and no name — only the campaign tag of the link you followed, if it had one.

Like every website, ours is delivered by a hosting provider (Cloudflare), which necessarily sees the network address of your device when your browser asks for the page. We have not yet established how long the provider’s operational logs keep it.

What do you keep when I sign in with Google?

Signing in asks Google for three things about you, and we keep them: your Google account identifier, your e-mail address and your name. They come from the openid, email and profile permissions.

There is no password. We never see one and never store one.

We set one cookie to keep you signed in, __Host-hoje_session. It cannot be read by scripts on the page and is sent only over secure connections. A second, short-lived cookie, __Host-hoje_pkce, exists only while the sign-in itself is in progress.

We also record which setup steps you completed, tied to your account, so we can see where people get stuck. It records that a step happened, not what you typed into it.

What happens if I connect Google Calendar?

Only if you choose to. Google asks you once for three permissions, and we ask for nothing beyond them:

• calendar.events — to create, change and withdraw the calendar events for your bookings.
• calendar.freebusy — to read when you are busy, so nobody can book you over something else.
• calendar.calendarlist.readonly — to find out which of your calendars is the main one.

We keep a small record of the connection: which calendar, which permissions, and when you connected it.

hoje.ai’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

What if I leave my e-mail address on the page?

Two doors on the home page — for a business with a team, and for a family — take an e-mail address so we can write to you when they open. We keep the address and the door it came through, and we use them only to write to you about that door.

What about my clients’ information?

When people book with you, the booking holds their name, their contact details and whatever else your booking page asks them. The people in those records never signed up with us.

Under Brazil’s data-protection law, the LGPD, you decide why that information is collected and what to ask for — so for it you are the controller (controlador) and we are the processor (operador): we store and handle it for you, on your instructions, and for nothing else. For the information about you — your account, your session, the steps you take — we decide the purposes, so we are the controller.

In practice: if one of your clients asks what you hold about them, or asks you to correct or erase it, that request is yours to answer. We help with what you tell us to do with the records — write to raf@bandeira.tech and say which. Today that is done by hand: a way for you to export and erase a client’s records yourself is not built yet, and we will not pretend it is.

If a client of yours writes to us instead, we will point them to you and act on your instruction.

Who else sees my data?

• Google — sign-in, and the calendar connection if you make one.
• Cloudflare — hosts the site and stores records.
• Resend — sends the booking e-mails.

These providers run their services outside Brazil, so using them can move personal data out of the country. That is how the service is provided, not an extra we add. We have not yet published which region each store sits in.

We do not sell personal data and we do not use it to advertise.

How long do you keep it?

We have not set a fixed period for any kind of record yet. Until we do, we keep account records while your account exists, and we erase what you ask us to erase. When we set periods, this notice will say what they are.

What are my rights, and how do I use them?

The LGPD gives you, about your own information, the right to:

• confirm that we handle it, and see it;
• have it corrected;
• have it anonymised, blocked or erased;
• take it with you;
• know who we share it with;
• withdraw a consent you gave.

Write to raf@bandeira.tech. If you are not satisfied with our answer, you can complain to Brazil’s data-protection authority, the ANPD.

Who is responsible, and who do I write to?

hoje.ai is the controller of the information about your account. Write to raf@bandeira.tech about anything in this notice.

Will this change?

Yes. The date at the top says when this version took effect. When we change what we collect or who we share it with, we change this notice first, and the date changes with it. The terms of use are the other half of what you agree to.