Privacy Policy

Last updated on 2026-10-30

This Privacy Policy explains how Easy Timetable collects, uses, shares and protects the personal data of those who visit the website and use the system, and what your rights are.

It follows the Brazilian General Personal Data Protection Law (LGPD, Law No. 13,709/2018) and, for users in the European Union, the General Data Protection Regulation (GDPR).

1. Who we are

Easy Timetable (www.horariofacil.com) is an online system for building school schedules, based in São Paulo, SP, Brazil.

For the registration, billing, support and browsing data described in this policy, Easy Timetable is the controller. For the data that the institution enters in the schedule, such as names of teachers and class groups, Easy Timetable acts as a processor: it processes this data only to build the schedule, on behalf of the institution, which is the controller.

2. What data we collect

• Registration: e-mail, password and country; to complete the registration, the name and position of the person in charge, the name of the institution, phone number and CPF or CNPJ.
• Billing: when you purchase a license, the data needed for billing and the invoice, such as name or company name, CPF or CNPJ and address.
• Schedules: the information you enter to build the schedule, such as class groups, subjects, teachers and their availability.
• Support: the messages you send to the AI support assistant, via WhatsApp or e-mail.
• Technical data: IP address, browser, language, approximate country and access logs (date and time).

We do not ask for sensitive personal data.

3. How we use the data

• Create and maintain your account and give you access to the system.
• Process the schedules on our servers and show the results.
• Process payments and issue invoices.
• Provide support, including through the AI support assistant.
• Send e-mails about your account and the service, such as registration confirmation, password recovery and payment notices.
• Protect the website, prevent fraud and comply with legal obligations.
• Improve the system and our customer service.

We do not sell personal data and do not use it for advertising.

4. Legal bases

We process personal data to perform the contract (providing the service you use or test), to comply with legal obligations (such as issuing invoices and keeping access logs), for our legitimate interests (such as security and service improvement) and, where applicable, with your consent, which you can withdraw at any time.

5. AI support assistant

To understand the questions and generate the answers, the assistant sends the content of the messages, and the schedule information needed to answer, to artificial intelligence model providers hired for this purpose.

Our customer service team may read the conversations to monitor and improve support.

In Execute and Full Control modes, the assistant only changes your schedule data when you ask it to.

Do not send through the chat any data that is not needed for support, such as documents or bank details.

6. Who we share the data with

We share personal data only with suppliers needed to operate the service, who process it according to our instructions:

• Hosting and cloud infrastructure, such as Google Cloud, and website delivery, such as Cloudflare.
• Payment partners, such as Asaas, Mercado Pago, Stripe and PayPal. Card details are entered directly with these partners, and Easy Timetable does not receive or store card numbers. Depending on the payment method, you are taken to the partner's page or we send the partner only the data needed to create the charge, such as name, CPF or CNPJ, e-mail and amount.
• Artificial intelligence model providers, for the support assistant.
• E-mail delivery services, for the messages about your account.
• WhatsApp, when you choose to receive support through this channel.

We may also share data with public authorities when required by law or a court order.

7. International data transfers

Some of these suppliers process data outside Brazil, for example in the United States. In these cases, we adopt the safeguards provided for in the LGPD and, for users in the European Union, in the GDPR.

8. Cookies

We only use the cookies needed for the website to work, such as the session cookie, which keeps you signed in and stores your chosen language. We do not use advertising or analytics cookies.

Some pages show YouTube videos; when you watch them, YouTube (Google) may use its own cookies, in accordance with Google's privacy policy. The website's fonts are loaded from Google Fonts.

When you make a payment, the payment partners may use their own cookies, on their page or in the payment form embedded in the website, to process the charge and prevent fraud.

You can block or delete cookies in your browser settings, but without the session cookie you cannot sign in to the system.

9. How long we keep the data

We keep the account and schedule data while the account is active, so that you can reuse it from one year to the next.

Access logs are kept for at least 6 months, as required by the Brazilian Civil Rights Framework for the Internet (Marco Civil da Internet, Law No. 12,965/2014), and tax data for the period required by tax legislation.

When you request the deletion of your account, we delete or anonymize the data, except for data we must keep due to a legal obligation.

10. Security

We adopt technical and administrative measures to protect the data, such as an encrypted connection (HTTPS), access restricted to the people who need the data for their work, and server monitoring.

If a security incident occurs that may cause significant risk or harm, we will notify the affected data subjects and the Brazilian National Data Protection Authority (ANPD) within the deadlines set by law.

11. Your rights

Under the LGPD, you can:

• Confirm whether we process your data and access it.
• Correct incomplete, inaccurate or outdated data.
• Request the anonymization, blocking or deletion of unnecessary data or data processed in breach of the law.
• Request the portability of the data to another provider.
• Request the deletion of data processed with your consent and withdraw that consent.
• Know who we share your data with.
• Object to processing that does not comply with the law.

You can correct your registration data directly in the system. For other requests, write to contato@horariofacil.com; we reply within 15 days.

Requests about data that the institution entered in the schedule, such as teachers' names, should first be made to the institution itself, which is the controller of that data.

If you are in the European Union, you also have the rights provided for in the GDPR, including the right to lodge a complaint with the data protection authority of your country, such as the AEPD in Spain or the Garante per la protezione dei dati personali in Italy. In Brazil, you can file a complaint with the ANPD.

12. Children

Easy Timetable is intended for schools and education professionals. The system is not directed at children and does not require entering student data.

13. Links to other websites

The website may have links to third-party websites, such as payment partners and social networks. These websites have their own privacy policies, and we recommend that you read them.

14. Changes to this policy

We may update this policy to reflect changes in the service or in the law. The date of the last update appears at the top of this page and, in the event of significant changes, we will inform you through the website or by e-mail.

15. Contact

For questions about this policy or your data, contact us: