Privacy Policy

1. Information we collect

We collect the following information when professionals and patients use our platform:

• Account data: name, email address, phone number, encrypted password, professional specialty (for therapists) and billing data.
• Session data: scheduled times, cancellations, administrative (non-clinical) notes.
• Communication data: messages sent through our support channels (WhatsApp, SMS, email) and calls to our phone line.
• Technical data: IP address, browser type, cookies and usage logs.

2. Use of Google data (Google Calendar API)

Our platform integrates with Google Calendar so professionals can sync their availability and booked sessions with Mejor Hablemos. This section complies with the Google API Services User Data Policy, including the Limited Use requirements.

2.1. Google data we access

When a professional connects their Google account to Mejor Hablemos through OAuth 2.0, we request access only to the following data, through the scopes listed:

• Basic profile (openid, email, profile): email address and name, to identify the connected account.
• Google Calendar — events (https://www.googleapis.com/auth/calendar.events): to create, update or delete, in the professional's calendar, the events for sessions booked on Mejor Hablemos.
• Google Calendar — availability (https://www.googleapis.com/auth/calendar.freebusy): to check only the professional's busy time slots and automatically block those times in the Mejor Hablemos calendar, so patients cannot book when the professional already has other commitments. This scope does not allow reading titles, descriptions, attendees or any other detail of the professional's events; only start and end dates and times marked as busy.

We do not access other Google services (Gmail, Drive, Contacts, etc.) or any calendar other than the one the professional explicitly authorizes.

2.2. How we use Google Calendar data

We use Google Calendar data exclusively to sync the professional's availability between Google Calendar and the Mejor Hablemos calendar, in two directions:

• From Google Calendar to Mejor Hablemos: we check the professional's busy time slots in their Google Calendar and automatically block them in the Mejor Hablemos calendar, so patients cannot book when the professional already has other personal or professional commitments. We only get start and end dates/times marked as busy; we do not read titles, descriptions or attendees.
• From Mejor Hablemos to Google Calendar: when a patient books a session through our platform, we create an event in the professional's Google Calendar with the appointment details (time, video call link and patient name). When a session is rescheduled or cancelled on Mejor Hablemos, we update or delete the corresponding event.

We do not use Google Calendar data for: advertising, training artificial intelligence models, transfer to third parties, behavioral analysis or any purpose other than the sync described above.

2.3. Storage of Google data

• OAuth tokens: we store the refresh token and the access token encrypted in our database (Supabase), to keep the connection active without asking the professional to authorize again on every use.
• Busy time slots: we may temporarily cache the time slots marked as busy (only start and end date/time, without event details) to speed up how the calendar is shown to patients. This cache is refreshed periodically.
• Events created by Mejor Hablemos: we store the identifier (event ID) of each event our application creates in Google Calendar, so we can update or delete it when the session is rescheduled or cancelled.

We do not store titles, descriptions, attachments or guest lists of events not related to Mejor Hablemos.

2.4. Sharing with third parties

We do not sell, rent or share Google Calendar data with third parties. The data is processed by our infrastructure providers, who act as processors under contractual confidentiality obligations:

• Railway (hosting of the backend that handles the OAuth flow, the tokens and the sync with Google Calendar).
• Vercel (hosting of the website and user dashboards).
• Supabase (encrypted database where the tokens and the professional's settings are stored).

These providers process the data only on behalf of Mejor Hablemos and do not use it for their own purposes.

2.5. Limited Use compliance

Mejor Hablemos' use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements and the additional requirements for restricted scopes where applicable.

2.6. Revoking access

The professional can revoke Mejor Hablemos' access to their Google account at any time from:

• The Mejor Hablemos professional dashboard ("Disconnect Google Calendar" option), or
• Google's permissions page: https://myaccount.google.com/permissions.

When access is revoked, we delete the associated tokens within 30 days of the disconnection. Events previously created in the professional's calendar remain in Google Calendar and must be managed by the user.

3. Text messages (SMS) and WhatsApp

If you call our phone line and book a session with our phone assistant, we send you the link to review your details and pay for the session you requested: by WhatsApp, if you use it; otherwise by text message (SMS), only if you verbally agree during the call after the assistant reads you this notice: "By providing your phone number, you agree to receive SMS customer care messages from Mejor Hablemos. Message frequency may vary. Standard Message and Data Rates may apply. Reply STOP to opt out. Reply HELP for help. We will not share mobile information with third parties for promotional or marketing purposes."

If you agree, you first receive a text confirming your opt-in ("You have agreed to receive SMS updates from Mejor Hablemos. Msg freq may vary. Std msg & data rates apply. Reply STOP to opt out, HELP for help.") and then one text with the link. If you do not agree, we send the link to your email instead. We may also send you session confirmations and reminders by WhatsApp if you agree.

We do not send marketing messages by SMS. Message frequency varies with the sessions you book. Message and data rates may apply. You can reply STOP at any time to stop receiving messages, and reply HELP for help or write to info@mejorhablemos.us.

Your phone number and your consent to receive text messages are not shared with third parties or affiliates for marketing or promotional purposes. They are used only by the providers we need to send the messages (the messaging platform), and only for that purpose. Our Terms and Conditions are at mejorhablemos.us/terms.

4. Legal basis and purpose

We process personal data on the basis of: (i) the performance of the services contract with the professional or patient, (ii) the explicit consent given when connecting a Google account, and (iii) compliance with applicable legal obligations.

5. Security

We apply reasonable technical and organizational measures to protect the data, including encryption in transit (HTTPS/TLS), encryption at rest of sensitive tokens, role-based access control and audit logs.

6. Retention

We keep personal data while the account remains active. Google tokens are deleted when the integration is disconnected. Accounting and billing records are kept for the applicable legal periods.

7. Your rights

You can request access to, correction, deletion or portability of your personal data, or object to its processing, by writing to info@mejorhablemos.us.

8. Changes to this policy

We may update this Privacy Policy. We will publish the current version at this same URL with the date of the last update.

9. Contact

Mejor Hablemos
Email: info@mejorhablemos.us
Website: https://mejorhablemos.us