Privacy Policy

Who we are

MultiReserva is operated by Futago Automações, the controller of the personal data processed on this platform. Channel for exercising your rights and privacy questions: [email protected].

Data protection officer

The data protection officer (LGPD art. 41) is Alexandre Garcia Torres. He is the contact channel between you, Futago Automações and Brazil’s National Data Protection Authority (ANPD).

• Email: [email protected]
• Phone: (92) 99175-7554

Data we process

• Account: the name and email of whoever creates and uses an organization.
• Public booking: the name, email and, if provided, phone number of whoever requests a booking through a public link, plus the free-text title entered on the request.
• Security: a cryptographic hash of your IP address, used only to prevent abuse of public booking.
• Payment: subscriptions are processed by Stripe. We do not store card data.

MultiReserva does not request sensitive personal data. Do not include health information, religion, or other sensitive data in the title or in free-text fields. If such content is entered incidentally in a public booking’s title, it follows the same retention and anonymization routine described below.

Why we process it (legal bases)

We process your data to provide the service you signed up for or requested (performance of a contract/procedure, LGPD art. 7, V) and to keep the platform secure (legitimate interest, art. 7, IX). Payment data is based on contract performance.

How long we keep it

Account data is kept for as long as the account exists. Public booking visitor data becomes eligible for anonymization 180 days after the booking ends; the routine runs daily. This period can be changed by the service configuration. You can also delete your data from the booking management page.

External backups: not configured and not verified. For that reason, we do not publish a retention period for copies, and RPO is neither defined nor proven; RTO is neither defined nor proven. If external copies are enabled, they will need an expiration period and re-anonymization after restore before that capability is announced.

Your rights

You can request access, correction, portability and deletion of your data, as well as revoke consent (LGPD art. 18).

• Public booking: use the management link you received to view or download a JSON of your data, cancel the booking, or use “Delete my data.” Deletion also cancels the booking, frees the time slot, anonymizes the data, and invalidates the link. Cancelling the booking also invalidates the management link. After that, self-service stops working, and your rights are exercised through the data officer’s channel, in the Data protection officer section — the same legal deadline still applies.
• Authenticated account: under “My account and privacy,” you can download a versioned JSON and request deletion through a single-use email link, valid for 30 minutes. If you are responsible for an organization, you need to transfer it to another verified member first.
• Organization data: deleting your account removes your access and the personal links that can be removed, but does not delete the organization, its subscription, or the bookings it needs to keep.
• Other requests: write to [email protected]. We respond within 15 days.

Who we share it with

MultiReserva’s application and database are hosted on servers located in Brazil. Bookings, account data and visitor data stay here.

The product also uses processors for payments (Stripe), email delivery, and, when an organization enables the integration, WhatsApp — some of them process data outside the country. The contractual inventory, sub-processors, and international transfer safeguards for these services are still being validated ahead of launch. The applicable list will be updated once those contracts are confirmed.

Changes

We may update this policy. Material changes will be communicated on the platform. The date at the top shows the last revision.