Privacy Policy

Data we store

• Clinic account details — the clinic identifier, WhatsApp Business Account (WABA) ID, business phone number ID, and connection status.
• WhatsApp access credentials — the access token the clinic grants us (via Meta Embedded Signup or manual connection) and the phone registration PIN. These are encrypted at rest and are never displayed again after connection.
• Message template records — the reminder templates submitted to Meta on the clinic's behalf and their approval status.
• Message and reminder records — patient phone numbers, appointment date/time, and delivery status for each reminder a clinic sends, including reminder batches uploaded by the clinic (e.g. CSV exports from their calendar system).

How we protect it

WhatsApp access tokens and registration PINs are encrypted at rest with a dedicated encryption key and are never written to logs in plaintext. Phone numbers are masked in operational logs. Data is stored in a managed database with access restricted to the service.

What we do not do

• We do not sell or share patient or clinic data with third parties.
• We do not use message content for advertising or profiling.
• We only call the WhatsApp Business Platform (Meta Graph API) to deliver the service the clinic asked for: managing its templates, phone numbers, webhooks, and sending its reminders.

Third parties

Message delivery uses Meta's WhatsApp Business Platform; message content and recipient numbers are processed by Meta under WhatsApp's business terms. Our infrastructure providers host the application and database.

Data retention and deletion

We retain clinic and message data for as long as the clinic uses the service. A clinic can request deletion of its account and all associated data at any time — see our Data Deletion Instructions.

Contact

Privacy questions: support@yamabushilabs.com (see also the Support page).