Pro365 GO privacy policy
Applies to Pro365 GO in the browser and in the app for iPhone, iPad and Android. Last updated: November 12, 2026.
Pro365 GO is HartSystem's clinic management system. This page explains which data about your account we process, why, for how long, and how to delete the account. We do not sell data, we do not show ads, and we do not track your activity across other apps or websites. For visitors to our website, the website policy applies.
Who is responsible for your data
For your account: HartSystem Sistemas, Brazilian company registration (CNPJ) 73.922.171/0001-41, Rua Frei Estanislau Schaette, 526, 3º andar, Água Verde, Blumenau/SC, 89037-000, Brazil. Data protection officer (DPO): Aline Hartmann, contato@hartsystem.com.br.
For what you record about the clinic's patients and clients (schedule, records, clinical charts, finances, conversations): the clinic. HartSystem only stores and processes that data on the clinic's behalf, under the system contract, and never uses it to train Pro365 AI. Requests from patients about that data belong to the clinic; if they reach us, we forward them to the clinic.
What account data we process, and for how long
| Data | Purpose | How long |
|---|---|---|
| Name, e-mail (which you sign in with), password, language and display preferences; the clinics your account is linked to | Create the account, verify your identity and open the clinics you have access to | As long as the account exists |
| Connected devices: the device name and an identifier the app generates on each installation (not the advertising identifier) | Remember the device; it can be disconnected on the connected devices screen, and changing your password disconnects all of them | Until disconnected, until you change your password, or until you delete the account |
| Access records: date and time of sign-in and sign-out, clinic, device and IP address | Security, and proof of who did or did not access the system | At least 6 months (Brazilian Civil Rights Framework for the Internet, Marco Civil da Internet, art. 15); after that, while needed for security and as evidence, with periodic review |
| IP address of whoever requests sign-up or a password reset, and the record of e-mails sent | Prevent abuse | 7 days |
| Error, support and performance records | Fix failures and detect abnormal use; they do not store what you typed | While needed to fix the failure and for security |
Legal bases (Brazilian General Data Protection Law, LGPD, art. 7): performance of the system use contract (V), for the account and devices; legal obligation (II), legitimate interest and the regular exercise of rights (IX and VI), for access and security records.
App permissions
The app asks for a permission only when you use the feature:
- Face ID or fingerprint (optional): biometric data never leaves the device; the device's system only tells the app whether unlocking succeeded.
- Camera: to take a photo for a record.
- Microphone: to record a voice message.
The app does not access your location, contacts, calendar or photo library, and does not use third-party components for analytics or advertising.
Pro365 GO does not use cookies. The device or browser stores only what the system needs to work: your session, language, display preferences and the last patient or professional you opened.
Where data is stored and who we share it with
Data is stored on HartSystem's servers on Microsoft Azure, in Brazil, and always travels encrypted (HTTPS). On the device, the credential is kept in the system's own secure storage (Keychain or Keystore). We share data only with:
- Google (Gmail): sends the system's e-mails (confirmation, invitation, password reset) and receives your e-mail address to deliver them. Google may process this data outside Brazil; the transfer is necessary to provide the service you requested (LGPD, art. 33, IX).
- The clinic your account is linked to: it sees your name and e-mail as a team member.
- Authorities: when required by court order or by law.
How to delete your account
You can delete your account yourself, in the app or in the browser:
- Sign in to Pro365 GO.
- Tap or click your name in the top bar.
- Choose "Delete account or leave an environment…".
- Tap "Delete my account", enter your password and confirm.
Immediately, your access ends in every clinic and in Pro365 Talk, and your devices are disconnected. The account is deleted 30 days later; if you sign in with your password within that period, you can keep it. At the end of the period, your links to clinics, your devices, your access to the integrator portal and to Pro365 Talk, pending password reset requests and any not-yet-accepted invitations sent to your e-mail are removed, and the account's name, e-mail and password are erased.
What is not deleted: what you recorded in the clinic's system and your user inside it, which belong to the clinic and which it is legally required to keep (in Brazil, clinical records for at least 20 years — Law No. 13,787/2018); and access records, for the period above.
If you are the only administrator of a Pro365 Talk space, deletion is only accepted once someone else is also an administrator, so the clinic is not left without one. Only want to leave one clinic? The same screen lets you leave an environment, and your account stays active in the others. Can't sign in? Write to contato@hartsystem.com.br with the subject "Delete account", from your account's e-mail address.
Your rights
You can request access to your data, correction, deletion, portability and information about who we share it with (LGPD, art. 18) by writing to contato@hartsystem.com.br with the subject "Privacy". We reply within 15 days. You can change your name and password, and delete your account, yourself, without contacting us.
In Portugal and the European Union the GDPR also applies: you also have the rights to restrict processing and to object, and you may lodge a complaint with the Portuguese data protection authority (CNPD) or with the supervisory authority of the EU country where you live or work.
Audience
Pro365 GO is intended for clinic professionals and staff aged 18 or over. It is not directed at children.
Changes
We may update this policy; the date is always at the top of the page, and important changes are announced by e-mail to account holders.