Privacy Policy
Last updated: 22 October 2026
This policy explains how Plano handles data in its clinic-management service, website and optional Google Calendar connection.
Responsibility for data
Each clinic determines the purposes and lawful grounds for processing its patient data. Plano processes that data to provide the service to the clinic. Plano also processes website enquiries and account information. For questions about medical records, contact your clinic first.
Data we process
Depending on enabled features, data may include account names and email addresses, clinic and staff details, patient contacts, appointments, medical records, documents, treatment plans, payment records and message statuses. We also process technical information needed to operate the service, such as request and error logs.
Google Calendar data
Connecting Google Calendar is optional and requires your authorization. Plano uses your Google account email to identify the connection. An administrator can read events from a selected calendar and import them as appointments. A doctor can sync their Plano appointments to their Google Calendar by creating, updating or deleting events synchronized by Plano. Event titles, dates, times and descriptions may contain personal data. Only connect calendars whose data you are authorized to process. Secret connection keys are stored encrypted on the server.
Limits on use of Google data
Data received from Google is used only to provide the calendar import and synchronization features you choose. It is not sold or used for advertising targeting or training general-purpose AI models. Plano's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Service providers and sharing
We use Lovable Cloud for hosting, authentication and data storage. Selected features may share data with Google Calendar, an email delivery service, Telegram or Meta WhatsApp. The website may use Meta measurement tools. Sharing depends on the feature used and clinic settings. Data may be processed outside your country. We may also disclose information to comply with legal obligations or protect service security.
Retention and security
Data is transmitted over HTTPS. Access to clinic data is limited by account, clinic and permissions. No system can guarantee absolute security. Data is retained as needed to provide the service, follow clinic instructions and meet applicable obligations. Removal from backups and technical logs may follow a different process from deletion of active records.
Your choices and requests
You can disconnect Google Calendar in Plano or revoke access in your Google account's Third-party connections settings. This stops future access but does not automatically delete previously imported appointments or events created in Google. Contact your clinic or the contact below to request access, correction, export or deletion. Requests may require identity verification and are subject to medical-record retention obligations. The website uses browser storage for sign-in, language and preferences.
Contact and changes
For questions about privacy or these terms, write to the address below. Updates will be reflected in this page's revision date. We will communicate material changes through the service or another appropriate channel.
security@esterox.com