This document is a draft and has not been reviewed by a lawyer yet. It must be approved by legal counsel before public use.
At DrOnlineIQ, we deeply respect the privacy of you and your patients. This document explains what information we collect, how we use it, and how we protect it.
1. Information We Collect
To provide our services, we collect the following information from clinics and their users:
- Account information: name, email, phone number, clinic name
- Patient information: name, date of birth, medical history, contact info (entered by the clinic)
- Financial information: invoices, payments, payment method type (full card numbers are not stored)
- Usage information: login logs, IP address, browser type, pages visited
- Technical information: device identifier for mobile app, authentication tokens
2. How We Use Information
We use your information only for:
- Providing and maintaining the service
- Sending appointment notifications and reminders via WhatsApp/SMS (at your discretion)
- Issuing invoices and tracking payments
- Improving service quality and fixing bugs
- Responding to support inquiries
- Complying with legal requirements
3. Data Storage and Security
All data is stored on secure servers (Neon PostgreSQL, Vercel) in the European Union.
All communications are protected with TLS 1.3 encryption.
Passwords are hashed with PBKDF2 and never stored in plain text.
Two-factor authentication (2FA) is available to all users.
Daily backups of all data.
4. Data Sharing
We never sell your information to third parties.
Data is only shared in the following circumstances:
- With your explicit consent
- With service providers (Neon, Vercel, Anthropic, Meta WhatsApp) bound by NDA
- In response to a valid legal order
5. Your Rights
You have the following rights:
- Access to your data
- Correction of incorrect information
- Deletion of account and associated data (within legal requirements)
- Export of data (JSON or CSV)
- Objection to specific processing
7. Contact
For any questions about privacy: