Privacy Policy
Last updated: September 29, 2026.
1. Operator and service data
Valman SAS (CUIT 30-71952923-9), located at Caboto 450, office 120, Autonomous City of Buenos Aires, Argentina, operates YaironBot. Account, contact, team and subscription data supplied by the business is used to administer its account; technical logs and usage counters are used for security, support and billing. These administrative purposes do not authorize other uses of content obtained from Google Calendar. Customer names and phone numbers, conversations, attachments, appointments and message statuses are processed to provide customer-service and scheduling features. Each business manages its customers' information and its team's access.
2. Google Calendar connection
The connection is optional and requires your authorization. We retrieve the calendar list (calendar.calendarlist.readonly) so you can select an owned calendar and manage its events (calendar.events.owned). We process identifiers, names, time zones, permissions and event data — titles, dates, times, status and metadata — to synchronize appointments and calculate availability. When updating linked events, we preserve other fields returned by Google, such as descriptions, attendees and reminders, to avoid overwriting them.
Synchronization is limited to the selected calendar: external events block times, and time changes to linked events may update the appointment in YaironBot. To create or update an event, we send Google appointment details, including the customer's name, service, professional, location and times; cancelling the appointment may delete that event. We store encrypted OAuth credentials to maintain the connection.
3. Artificial intelligence and recipients
We use the OpenAI API to interpret requests and generate responses. We send the necessary context: messages, conversation history, customer and appointment information, business rules and availability results. This may include dates, times and availability derived from Google Calendar, as described in the notice you accept before enabling this processing. We do not send Google credentials to OpenAI. We disable response storage using store: false; OpenAI may retain security logs under its data-processing terms.
Google receives the event data you synchronize. WhatsApp and, where applicable, the messaging provider receive messages and their statuses; appointment messages may contain dates and times derived from Calendar. Infrastructure providers process the data needed to host, transmit and protect these features. Processing of Google data by these providers and OpenAI is limited to the described features and the restrictions in section 4.
Separately, administrative email and payment providers receive the contact, account or subscription data needed to verify the business's email address, communicate account activation or service changes, and process its subscription. We do not send them content obtained from Google Calendar for these tasks. The processing described may take place outside your country.
4. Limited Use of Google data
YaironBot's use and transfer of data received from Google APIs, including raw, aggregated, anonymized and derived data, adhere to the Google API Services User Data Policy and the Google Workspace API User Data and Developer Policy, including their Limited Use requirements.
This data is used exclusively to provide or improve YaironBot's user-facing calendar synchronization, availability checking, appointment management and appointment communication features. It is not sold or used for advertising or creditworthiness assessments. Nor is it used, retained or transferred to create, develop, train, fine-tune or improve foundational, generalized or non-personalized AI or machine learning models, whether our own or those of third parties. Voluntary data sharing with OpenAI for training is disabled.
Transfers are limited to authorized features with your consent, security, legal obligations, or a business transfer with explicit prior consent. Human access is restricted to specific data with your documented consent, security needs, legal obligations, or aggregated and anonymized data for internal operations permitted by Google. These restrictions take precedence over any general purpose in this policy.
5. Retention and your rights
We retain account data, appointments and conversations while necessary to provide the service or until an applicable deletion request. Synchronization data is retained to operate the connection. Exceptions for security or legal obligations are limited to the necessary information and duration; data deleted from active operations is removed from backups according to their retention cycle and must not be reintroduced when restoring them.
Under “WhatsApp y calendario”, you can withdraw acceptance of Google and AI processing or disconnect Google. Withdrawing acceptance pauses synchronization and AI processing for that account. Disconnecting removes usable credentials and imported availability blocks, but retains appointments, conversations and linking references; it does not delete Google events. To also revoke permissions, visit your Google Account connections.
To access, correct or delete your data, including Google data and its derivatives, email contacto@yaironbot.com identifying your account and request, without sending passwords or tokens. We will verify your identity and authority and explain the scope, timeframes and any necessary legal retention. A business's customers may also contact the business managing their information.
6. Information protection
We apply HTTPS connections, access controls, logical separation by business and encryption of integration credentials to reduce unauthorized access. No system can guarantee absolute security.
7. Changes
We will publish revisions with their date. We will communicate material changes before applying them and request renewed acceptance when changes to data use or transfers require it.