Privacy Notice

1. Who this Notice applies to

This Notice applies to:

• Customers: individuals who use the Service to discover Businesses and make Bookings as end consumers.
• Businesses and their team members: commercial or professional entities that subscribe to the Service, and the individuals who use a Business account.
• Visitors: people who browse our public website, our marketing pages or our help content without signing in.

This Notice covers personal data we handle when you use the Service. It does not cover personal data that a Business handles independently as its own controller (for example, the way a Business uses your contact details to communicate with you about your Booking after we share them with the Business). Each Business is independently responsible for its own privacy practices, in accordance with Section 18 of the General Terms and Conditions.

2. The personal data we collect

We collect personal data in three ways: (a) directly from you, (b) automatically when you use the Service, and (c) from third parties such as identity providers and payment processors.

2.1 Information you provide

Customers may provide:

• Name, email address, phone number, locale (language and country setting);
• Optional profile data such as gender and a profile photo;
• Booking details (date, time, party size, special requests, notes);
• Payment information when they make a Booking that requires a deposit or a guarantee (handled by the Business's payment processors: we receive a tokenized reference, not your full card number);
• Communications you send us through support or in-app messaging.

Businesses and their team members may provide:

• Company name, address, contact details, and an identifying slug;
• Tax identifiers, billing address, and other accounting data;
• Names, emails, phone numbers, and roles of team members;
• Operational data about the business (layouts, schedules, policies, service types, images, prices, cancellation rules);
• Payment-method references (tokenized) for the subscription;
• Communications you send us through support or in-app messaging.

2.2 Information collected automatically

When you use the Service, we automatically collect:

• Device and connection data: IP address, browser type, operating system, device identifiers, language preference, and time zone.
• Usage data: pages and screens viewed, features used, links clicked, search queries, and time-stamped events related to your interactions with the Service.
• Approximate location: derived from your IP address. If you grant the relevant permission on your device, we may also use a more precise location to sort Businesses by distance and to power address autocomplete.
• Cookies, SDKs and similar technologies: see Section 8.

2.3 Information from third parties

• Identity providers: if you sign in with Google, Apple or Facebook, we receive the basic profile information that provider supplies (such as your email address, your name and a stable account identifier).
• Payment processors: when you pay through Stripe or Mercado Pago, we receive the transaction status, masked card details (such as the last four digits and the card brand) and the authorization, capture and refund events. We do not receive or store your full card number, its expiry date or the security code.
• Businesses: when you contact a Business directly (for example, by telephone to make a Booking) and the Business records that interaction in the Service, we receive that information.
• Fraud-prevention and analytics vendors: we may receive risk signals associated with sign-ins, payments or device fingerprints.

3. How we use personal data

We use personal data to:

• Provide the Service: create and authenticate your account; show available Businesses; process Bookings and the related authorizations, captures, refunds or chargebacks; send transactional notifications (Booking confirmations, status changes, payment receipts, security and account notices, subscription invoices); and operate the Business portal and the help desk.
• Operate Business subscriptions: process Subscription Plan purchases, their renewals, upgrades and downgrades, the invoices and the provisioning of the corresponding application instance.
• Provide customer support: triage, route, answer, and document support requests; collect satisfaction feedback. To diagnose an incident, our authorized staff may need to view the Service as a User sees it. That access is time-limited, recorded in an auditable log, and is generally carried out in read-only mode.
• Protect the Service: detect, prevent and respond to fraud, abuse, security incidents and breaches of our Terms or of applicable law.
• Improve and develop the Service: analyze usage, debug errors, test new features, measure performance and carry out internal research.
• Communicate with you: send transactional messages (which you cannot opt out of while you have an active account) and, in line with the choices described in Section 9, send marketing or product-update messages.
• Comply with law: meet tax, accounting, anti-money-laundering, consumer-protection and other legal obligations; respond to lawful requests from authorities; enforce our agreements; and protect our rights and the rights of others.

Where required by law, we will identify a specific lawful basis (such as performance of a contract, our legitimate interests in operating and securing the Service, your consent, or compliance with a legal obligation) for each use.

4. How we share personal data

We share personal data only in the circumstances below. We do not sell personal data, and we do not share personal data for cross-context behavioral advertising. See Section 7.4 for how this maps to California-specific terminology.

4.1 With Businesses, to manage Bookings

When you make a Booking, we share with the relevant Business the data it needs to manage it: typically your name, the party size, your contact details, the notes, the add-ons and the payment status. Once shared, the Business acts as an independent controller of that data and must use it only as permitted by our Terms and by applicable law.

4.2 With service providers (processors)

We engage third-party vendors to host, secure, operate, and improve the Service. They process personal data on our behalf, under contract, and only for the purposes we instruct. See Section 5 for the categories and examples.

4.3 With payment processors

When you make a payment, the payment processor receives the data it needs to authorize, capture, refund, or dispute the charge. Amounts associated with Bookings are processed in the account the Business itself holds with its payment processor. The payment processor acts as an independent controller for fraud prevention and regulatory compliance purposes, under its own privacy policy.

4.4 With identity providers

If you sign in with Google, Apple, or Facebook, that provider learns that you signed in to Furonto. Your relationship with that provider is governed by its own privacy policy.

4.5 For legal reasons

We may disclose personal data if we believe in good faith that disclosure is necessary to (a) comply with a law, regulation, subpoena, court order, or other lawful request; (b) enforce our Terms; (c) detect, prevent, or address fraud or security or technical issues; or (d) protect against harm to the rights, property, or safety of Furonto, our Users, or the public.

4.6 In a corporate transaction

If Furonto is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our assets, personal data may be transferred as part of that transaction, subject to standard confidentiality protections.

4.7 With your consent or at your direction

We may share personal data for any other purpose disclosed to you at the time of collection or with your separate consent.

5. Third parties that process personal data on our behalf

We engage the following categories of third parties to help us operate the Service. The non-exhaustive examples in italics are current vendors as of the date of this Notice and may change over time. We update this list when material changes occur.

• Cloud hosting and infrastructure: to run our applications, databases, file storage and content delivery network.
• Email and transactional messaging: to send Booking confirmations, password resets, invoices and other operational messages.
• Identity providers: to support sign-in with third-party accounts (Google, Apple, Facebook).
• Payment processors: to process Customer deposits and guarantees and Business subscription payments (Stripe, Mercado Pago).
• Maps and address services: to power address search and geolocation features.
• Help desk and support tooling: to route and answer support requests.
• Analytics, product telemetry and error monitoring: to measure usage, diagnose faults and improve the Service.
• Conversion-tracking and advertising-measurement vendors: only where a Business chooses to enable a third-party tag on its listing, and only on those pages.
• Fraud-prevention and security vendors: to flag suspicious sign-ins, payments or content.
• Professional advisors: legal, accounting and tax advisors, where engaging them requires access to the data.

A current detailed list of named subprocessors is available on request via the contact in Section 12.

6. How long we keep personal data

We retain personal data for as long as your account is active and as needed to provide the Service, and then for additional periods to:

• comply with legal, tax, accounting, and audit obligations (typically several years, as required by applicable law);
• enforce our agreements;
• resolve disputes and defend legal claims; and
• maintain backup, archival, and security records.

Specific categories of data may be retained for shorter or longer periods based on the type of data and the purpose. For example:

• Booking records may be retained for a period that allows us to handle disputes and chargebacks.
• Subscription and invoice records are retained for the periods required by accounting law.
• Account data is deleted or anonymized 30 (thirty) calendar days after account closure, in line with Section 17.4 of the General Terms and Conditions, and subject to the periods above.
• Provisioned application instances for churned subscriptions are soft-deleted on churn and are deleted or anonymized 30 (thirty) calendar days after churn.

If you ask us to delete your data, we will do so to the extent required and consistent with the retention requirements above.

7. Your privacy rights

7.1 Rights available to most Users

Depending on where you live, you may have some or all of the following rights:

• Access to the personal data we hold about you.
• Rectification of inaccurate or incomplete data.
• Deletion of your data, subject to legal and contractual exceptions.
• Portability: receive your data in a structured, commonly used, machine-readable format.
• Restriction or objection: restrict certain uses or object to them.
• Withdrawal of consent for processing that is based on consent (without affecting prior processing).

To exercise these rights, use the contact details in Section 12. We will verify your identity (normally by confirming that you control the account email address) before responding. We aim to respond within ten calendar days of receiving the verified request, and in any event within the period required by applicable law. We will not discriminate against you for exercising a privacy right.

7.2 California residents (CCPA / CPRA)

If you are a California resident, you have the following rights with respect to personal information we collect about you:

• Right to know the categories and specific pieces of personal information we have collected, the categories of sources, the business or commercial purposes for collecting, and the categories of third parties with whom we share it.
• Right to delete personal information we have collected, subject to legal exceptions.
• Right to correct inaccurate personal information.
• Right to opt out of "sale" or "sharing" of personal information.
• Right to limit use of sensitive personal information to specific permitted purposes.
• Right to non-discrimination for exercising these rights.

7.3 Categories of personal information collected (California disclosure)

In the prior 12 months, we have collected the following categories of personal information, as defined in the California Consumer Privacy Act:

We use sensitive personal information only for purposes permitted by California law without an opt-out (such as providing the Service you requested, security, and fraud prevention). You may still ask us to limit use beyond those purposes.

7.4 "Sale" and "Sharing" of personal information

We do not sell personal information for money, and we do not share personal information for cross-context behavioral advertising, as those terms are defined under California law. If we ever change this practice, we will update this Notice and provide the required opt-out mechanism.

7.5 How to exercise California rights

Use the contact details in Section 12. You may also authorize an agent to make a request on your behalf, in which case we will require proof of authorization and verify your identity.

7.6 Other U.S. states

Residents of other U.S. states with comprehensive privacy laws (such as Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and others as enacted) may have similar rights. We honor those rights to the extent required by the applicable state law. Use the contact in Section 12.

7.7 Argentina and other Latin American jurisdictions

If you reside in Argentina, Personal Data Protection Law 25.326 grants you rights of access, rectification, updating, and deletion, and allows you to file a complaint with the Agencia de Acceso a la Información Pública. Residents of Brazil, Mexico, Chile, Colombia, Peru, and Uruguay have equivalent rights under their local rules. We handle these requests through the contact details in Section 12 within the period set by applicable law.

8. Cookies and similar technologies

We use cookies, local storage, mobile SDKs, and similar technologies to:

• Keep you signed in and remember your preferences (strictly necessary).
• Remember settings such as language and recently viewed Businesses (functional).
• Measure performance and how the Service is used (analytics).
• Diagnose errors and monitor uptime (operational telemetry).
• When a Business has enabled a third-party tag on its listing, support the Business's own analytics or conversion tracking on the pages associated with that Business.

Categories that are not strictly necessary are enabled only with your consent, which you may give, refuse, or review at any time from the cookie preferences panel available in the footer of the application. You can also control cookies from your browser or device settings. Blocking strictly necessary cookies may prevent parts of the Service from working.

9. Your communication choices

• Transactional messages (Booking confirmations, status changes, payment receipts, security and account notices, subscription invoices) are part of the Service. You cannot opt out of them while you have an active account.
• Marketing and product-update messages are sent only where permitted by law. You can opt out via the unsubscribe link in those messages or through your account settings.
• Push notifications can be controlled through your device's notification settings.
• Precise location permissions can be revoked through your device's settings.

10. Children

The Service is not directed to children under 13 (or such higher age as may be required by applicable law in your jurisdiction, such as 16 in some contexts). We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us at the address in Section 12 and we will delete it.

11. International transfers

We are based in the United States, and we process personal data in the United States and in other countries where our service providers operate. If you access the Service from outside the United States, you understand that your personal data may be transferred to, stored in, and processed in jurisdictions whose data-protection laws may differ from those of your home jurisdiction. Where required, we rely on appropriate safeguards for international transfers.

12. How to contact us

Tecnia Labs LLC 1600 Van Lennen Avenue, Suite 101 Cheyenne, Wyoming 82001, USA

• Privacy requests and inquiries, and legal notices: legal@odoo.furonto.com
• General support: through the Business portal, via the help desk form on our website, or at support@odoo.furonto.com
• Sales inquiries: info@odoo.furonto.com

If you have an unresolved concern, you may also contact your local data-protection authority, where applicable.

13. Changes to this Notice

We may update this Notice from time to time. If we make material changes, we will notify you by email or through an in-app or portal notice at least 10 (ten) calendar days before it takes effect, and update the "Last updated" date above. Your continued use of the Service after the effective date of an updated Notice constitutes your acknowledgement of it.

This Privacy Notice is written in Spanish. Any translation is provided for convenience only; in the event of a discrepancy, the Spanish version prevails.