Back to home
Legal center

Privacy

Privacy Policy

Effective Date: August 16, 2026

1. Data we process

We process clinic and patient information required to run appointments, payment records, treatment plans, appointment reminders, invoices, and review requests. Personal health information is handled responsibly and never sold to third parties.

2. Security

Our infrastructure uses tenant-level isolation, encrypted storage, role-based access, and secure API connectivity for WhatsApp, SMS, and cloud services. We maintain a strict access model to protect patient confidentiality.

3. Patient rights

Where applicable, patients may request access, correction, or deletion of their personal data through the clinic acting as the data fiduciary. RehabDesk AI provides the operational tools needed to export or remove records as part of the clinic's compliance process.

4. Zero monetization promise

We do not sell, broker, or monetize patient contact details or clinical records to advertisers or third parties. Data is used only for the operation of the SaaS application and the service levels agreed to by the clinic.