SaaS product · Marandev
Dru Forms: your forms, turned into data.
Design forms by dragging fields and each one becomes a record CRUD with history, signatures, relations and filters. Built for forms that get filled thousands of times, like medical records, inspections or orders, and also books appointments for your clients.
Loose forms never become information
Spreadsheets, PDFs and web forms leave data scattered, with no history and no links between them. Dru Forms stores them as records: each form is a small database your team fills, searches, filters and audits.
- One form, one CRUDEach form defines who can create, edit and delete records, whether history is kept and which field identifies each record.
- Connected formsA field can point to a record in another form (Patient → Visits) and from the patient you see their related visits.
- Each company, its own spaceMulti-company: every company has its own forms, users, plan and data, isolated from the others.
From form to record, with no code
-
Visual builder
Drag fields onto a canvas of rows and columns, with undo and redo, a form preview and a JSON schema view.
-
Seven field types
Text, number, date with optional time, single or multiple select, yes/no, handwritten signature and reference to another form.
-
Configurable records
Set per form whether records can be edited or deleted, whether history is kept and the title field that identifies each record.
-
Relations between forms
Reference fields with a searchable picker, a list of related records and delete rules: restrict or unlink.
-
History and traceability
Every change records who made it and when. Deleted records keep a note of their last content.
-
Handwritten signature
Sign with mouse, finger or stylus. A signed record is locked and cannot be edited.
-
Filters, sorting and search
Filter by text, number or date ranges, options and references; sort, search and mark fields as unique.
-
Built for volume
Designed for millions of records: per-field indexes, cursor pagination and data partitioned by company.
-
Online booking with no sign-up
A public page to book appointments from a phone, installable as an app, with the name and logo of each company. The client picks service, professional, day and time, and can check or cancel the appointment with a code.
-
Telegram and WhatsApp bots
Your clients book, check and cancel from the chat, with notices when an appointment is confirmed, changed or cancelled, and an automatic reminder before it.
-
Schedules, closures and holidays
Weekly hours per company and per professional, one-off closures and blocks, holidays by country and a preview of what the client will see.
-
No double bookings
A service catalog with durations, professionals or resources, a client file with history and an agenda filterable by professional, status and source.
A clear builder, records inside and out
Real screenshots from a Dru Forms test environment.
Built to run for real
Designed, developed and deployed end to end by Marandev.
- Data that is not lostValues are stored by field id, with no per-form tables: editing a form does not destroy data. Every form version is kept.
- Changes with confirmationBefore saving a form that has records, the platform computes the impact (removed field, new required field, narrower range) and asks for confirmation.
- Infrastructure as codeThe whole server is provisioned and deployed in a repeatable way, with versions visible in the app.
Privacy policy and data processing
1. Who we are and what this policy covers
Dru Forms is a forms and records platform, with appointment scheduling, operated by Marandev (Maldru), a software developer based in Colombia. This policy explains how personal data is handled in the admin panel, on each business's public booking page and in the Telegram and WhatsApp bots. It follows Colombian Law 1581 of 2012, Decree 1377 of 2013 (compiled in Decree 1074 of 2015) and other Colombian personal data protection rules.
2. Roles: controller and processor
Dru Forms is used by businesses (the "companies") to serve their own customers. Therefore:
- End-customer data (people who book an appointment or whose data is captured in a form): the controller is the business that collects it. Marandev acts as data processor: it processes the data on the business's behalf, only to provide the service and following its instructions.
- Business account and panel user data (administrators): Marandev is the controller.
If you are a business's customer and want to exercise your rights, you can contact the business first; you can also write to us and we will handle your request.
3. Data we process
- About the company: legal name, tax ID (NIT), phone, public link, logo, hours, services, resources or professionals, contracted plan, validity and recorded subscription payments.
- About panel users: name, username, email when registered to send them access details, password (stored in protected form), role and session records.
- About end customers: name, phone, email (optional), notes that they or the business add, and the data of each appointment (service, professional, date and time, status, booking channel, change history, notices sent and whether the business called them).
- About forms and records: the structure of the forms each company creates (fields, versions and settings), the records its users capture (including handwritten signatures, stored as strokes), each record's change history with who made each change and when, and the note kept of deleted records.
- If they book through Telegram: the Telegram chat identifier needed to reply and send notices, and the username or name Telegram shares with the bot.
- If they book through WhatsApp: their phone number or WhatsApp user identifier, their username if they have one, the name they type and the delivery status of the messages they receive.
- Acceptances: the date and version of the terms and privacy policy accepted by end customers and panel users.
- Technical data: IP address and server access logs, used for security, abuse prevention and troubleshooting.
Marandev does not decide what data is captured in forms: each company does. If your company uses forms for sensitive data (for example, health data) or data about minors, it is responsible for holding the authorization required by law and for limiting its users' access to that data. Avoid writing sensitive data in appointment notes.
4. What we use the data for
- Storing, displaying, filtering and auditing form records, and keeping their change history.
- Managing the agenda: creating, confirming, rescheduling and cancelling appointments, and preventing schedule clashes.
- Sending appointment notices and reminders through the enabled channels (Telegram and WhatsApp).
- Recording acceptance of the terms and privacy policy.
- Managing accounts, plans and each company's validity.
- Maintaining security, preventing fraud and abuse, and fixing faults.
- Complying with legal obligations.
We do not sell personal data or use it for advertising, and we do not share it with third parties other than the providers named in this policy.
5. Telegram, WhatsApp and other third parties
When a business turns on an integration, messages go through Telegram or WhatsApp (Meta), which process data under their own privacy policies; Marandev does not control that processing. On WhatsApp, each business uses a number from the platform's WhatsApp Business account and notices are sent with Meta-approved templates. Bot tokens and integration credentials are stored encrypted. The platform runs on server infrastructure contracted by Marandev; no other providers receive end-customer data.
6. Cookies and browser storage
Dru Forms uses no advertising or tracking cookies. It uses browser storage only for what is strictly necessary: keeping the panel session, remembering the light or dark theme, and enabling installation as an app (PWA) with its file cache. The marandev.co site stores only your theme preference.
7. Retention and deletion
We keep data while the company account exists, so it retains its appointment history. If a company is deleted, its data is permanently erased, including forms, records, customers, appointments and history. A business can also delete a customer and all their appointments from the panel. When a form allows deleting records, deletion is permanent (including its history), but an immutable note remains with the last content, who deleted it and when, viewable only by the company's administrators. Technical server logs are kept only as long as needed for security and troubleshooting. We make daily backups of the database and logos, kept for about 14 days; a deleted record may therefore remain in those backups until they are rotated.
When a company's plan expires, access and bookings are suspended, but data is not deleted for that reason.
8. Security
We apply reasonable technical and organizational measures: encrypted connections (HTTPS), secrets encrypted at rest, role-based access control with isolation between companies, expiring sessions, rate limits, automatic abuse blocking and controlled deployments. No system is infallible; if we detect an incident affecting your data, we will act and inform you as required by law.
9. Your rights
As a data subject you may know, update and correct your data, request proof of the authorization, be informed about how it is used, revoke the authorization or request deletion where applicable, file complaints with the Superintendencia de Industria y Comercio (SIC) and access your data free of charge. We answer queries and claims within the legal deadlines (10 and 15 business days respectively).
To exercise them, write to hola@marandev.co with your name, your phone number and the business you booked with.
10. Minors
Dru Forms is not aimed at people under 18 as panel users. If a business books appointments or records data about minors, the business must hold the authorization of their legal guardians.
11. Changes and contact
We may update this policy; the current version and its date will always be on this page, and we will notify companies of relevant changes. Contact: hola@marandev.co.
Terms of service
1. Acceptance and scope
These terms govern the use of Dru Forms, a forms and records platform, with appointment scheduling, operated by Marandev (Maldru). By creating an account, using the panel or booking an appointment through a business that uses the platform, you accept these terms and the privacy policy. If you act on behalf of a company, you state that you have authority to bind it.
2. The service
Dru Forms lets a company design forms and manage their records (create, view, edit and delete according to their settings, with history, handwritten signatures and relations between forms), and also publish its availability, receive bookings through a public page, Telegram and WhatsApp, manage its agenda, customers, services, resources and hours, and send notices and reminders. It is a management tool: the relationship and any service provided between the business and its customer are theirs alone, and Marandev is not a party to it.
3. Accounts and access
Company accounts are created by Marandev or whoever it authorizes. Panel users must accept these terms and the privacy policy when signing in, and will be asked again when the version changes. You are responsible for keeping your credentials confidential, for activity carried out with them and for the users you enable. Tell us immediately if you suspect unauthorized access.
4. Plans, validity and payments
- Each company has a plan priced in Colombian pesos (COP) and a validity period with start and end dates, or unlimited if so agreed.
- Renewal extends validity by one month (or as agreed). If you renew before expiry, you do not lose the remaining days.
- When validity has expired, the panel is limited, the public booking page stops accepting appointments and the bots (Telegram and WhatsApp) and reminders stop sending messages. Your data is kept and everything is restored on renewal.
- Prices and commercial terms are agreed with Marandev. Unless stated otherwise, payments for periods already started are non-refundable.
5. Acceptable use
You may not use Dru Forms for illegal or fraudulent activity, to send spam or unsolicited messages, to impersonate others, to try to access other companies' data, to breach or overload the platform (including automated attacks) or to store unlawful content. We may limit or suspend use that puts the service or third parties at risk.
6. Your customers' data
You are the controller of your customers' personal data: you must inform them of how it is processed, hold their authorization and handle their requests, as required by Colombian law. Marandev processes it as processor, as described in the privacy policy. Before booking, the platform asks the customer to accept these terms and the privacy policy and records the date and version accepted; this does not replace any authorization you must obtain yourself where the law requires it. The content of forms and records is defined and captured by your company: you are responsible for its lawfulness and accuracy and for holding the necessary authorizations, especially if you collect sensitive data or data about minors. Customers receiving notices through Telegram or WhatsApp must have started the chat with the bot or the business's number; you must not use notices for purposes other than their appointments.
7. Telegram, WhatsApp and third-party services
The integrations depend on Telegram and WhatsApp (Meta) and are subject to their terms, policies and availability, including WhatsApp's template and 24-hour window rules. Each business's WhatsApp number is assigned by Marandev from its WhatsApp Business account and may be changed or withdrawn if Meta requires it. Marandev is not responsible for outages, changes, blocks or restrictions of those platforms, or for whether a message is delivered or read.
8. Availability and support
We work to keep the service continuously available, but it is provided "as is", with no guarantee of uninterrupted or error-free operation. We may perform maintenance and updates and will try to give notice in advance when they affect use. Support is provided by email at hola@marandev.co.
9. Intellectual property
Dru Forms's software, design, trademarks and documentation belong to Marandev. You are granted a limited, non-exclusive, non-transferable right of use while your plan is valid. You keep ownership of your data, your forms and your logo, and you authorize us to process and display them only to provide you with the service.
10. Limitation of liability
To the extent permitted by law, Marandev is not liable for lost profits, lost customers or appointments, indirect damages, or for acts of third parties, force majeure or misuse of the platform. Where liability exists, it is limited to the amount paid for the service in the three months before the event. Nothing above limits rights that the law does not allow to be limited.
11. Suspension and termination
You may stop using the service at any time and ask us to delete your company and its data. We may suspend or terminate an account for breach of these terms, non-payment or risk to the platform, giving notice where reasonable. On termination, data is handled as set out in the privacy policy.
12. Changes, governing law and contact
We may change these terms; the current version and its date will always be on this page, and substantial changes will be communicated to companies. Continuing to use the service after a change means you accept it. These terms are governed by the laws of the Republic of Colombia and disputes will be submitted to the competent courts of Colombia. Contact: hola@marandev.co.