Who we are
Plenixia SL (VAT B05584792), C/ Portbou 1, 5º 4ª, 08028 Barcelona, Spain. Contact: hello@plenixia.com. Plenixia Agenda is the online booking system Plenixia provides to businesses (our clients) so that their own customers can book appointments.
Data we process
Account data of dashboard users (name, email). Booking data that end customers enter in the booking form (name, email, phone, answers to the appointment questions, date and time). If a user connects their Google account, the Google Calendar data described below.
Google user data (Google Calendar)
When a user connects their Google account, Plenixia Agenda requests: their email address (to identify the connected account); read access to calendars (calendar.readonly), used only to check busy periods so that times that are already taken are not offered for booking, and to list the user's calendars so they can choose which ones to use; and events access (calendar.events), used only to create, update or cancel, in their calendar, the event for each booking made in Plenixia Agenda, including its Google Meet link and the invitation to the customer. We do not read the title, description, attendees or content of the user's other events: we only use their start and end times to know whether the user is busy. We never modify or delete events that were not created by Plenixia Agenda.
Limited Use
Plenixia Agenda's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, do not use it for advertising, do not use it to train artificial intelligence models, and do not allow humans to read it, except with the user's explicit consent, for security purposes, to comply with applicable law, or when aggregated and anonymized for internal operations.
Storage and security
Google access tokens are encrypted in transit and stored in a table that can only be accessed by our servers (never from the browser), and are only used for the actions described above. Data is hosted with cloud infrastructure providers offering adequate safeguards under the GDPR.
Retention and deletion
Booking data is kept while the business is a Plenixia client and for the applicable legal periods. Google tokens are kept until the user disconnects their account (from the Plenixia Agenda dashboard or at https://myaccount.google.com/permissions); they are then revoked and deleted. Users can request deletion of all their data at any time by writing to hello@plenixia.com.
Legal basis and your rights
We process data to provide the contracted service and, for end customers, with their consent when they book. You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to hello@plenixia.com, and lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Plenixia Agenda · plenixia.com