Privacy policy
Version 1.0 — effective from 21 September 2026. The Portuguese version is the binding one. This page is a courtesy summary.
In short
- Who. Khrono is operated by Gabriel Icaro de Andrade Pequeno Desenvolvimento de Software LTDA (Giap Desenvolvimento de Software), CNPJ 59.685.006/0001-92, Avenida Paulista 1106, Sala 01, 16th floor, Bela Vista, São Paulo/SP, Brazil. Data protection officer: privacidade@khrono.tech.
- Two roles. For the subscriber's account data we are the controller. For the subscriber's clients' data (people who book), the subscriber is the controller and we are the processor: we only process it to deliver the service.
- What we collect. Account and billing data of the subscriber and team; booking data of end clients (name, e-mail, phone, service, time, history, loyalty); access logs; support messages. No sensitive data by default.
- Why. To run the service, send booking confirmations and reminders by e-mail, bill and issue invoices, keep the platform secure and improve it with aggregated metrics. Marketing to subscribers only with consent.
- Sharing. Only with the providers needed to run the service (hosting, transactional e-mail, payments, invoicing, Google sign-in for the client area), under contract. We never sell personal data.
- Retention. Account data for the life of the subscription plus 90 days; access logs 6 months; tax records 5 years.
- Security. TLS in transit, encryption at rest, hashed passwords, role-based access, daily backups, incident notification as required by law.
- Cookies. Only strictly necessary ones (session, language, theme). No advertising cookies.
- Your rights. Access, correction, deletion, portability, objection and consent withdrawal — from the dashboard or by e-mail to privacidade@khrono.tech, answered within 15 days. End clients should contact the business they booked with; we help it respond.
Read the full policy: Política de privacidade (Portuguese) · Terms of use.