At CliniEcho ("we," "our," or "us"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and the services we provide (collectively, the "Service").

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.

1. Information We Collect

We may collect information about you in a variety of ways. The information we may collect on the Service includes:

• Personal Data: Personally identifiable information, such as your name, email address, phone number, and professional details (such as clinic name or medical credentials) that you voluntarily give to us when you register for the Service.
• Financial and Transactional Data: Details related to your subscription, payments, and billing address.
• OAuth and Platform Integration Data: When you connect external accounts (such as Google and Meta/Facebook/WhatsApp accounts), we collect OAuth access tokens, refresh tokens, and permissions configuration required to sync reviews and send notifications.

2. Use of Your Information

We use the information we collect to operate, maintain, and improve our services, including:

• To manage and sync reviews from your linked platforms.
• To facilitate WhatsApp and SMS notification integrations.
• To authenticate you and keep your account secure.
• To communicate with you regarding updates, support, and billing.
• To diagnose technical problems and optimize the performance of CliniEcho.

3. Google API Services & OAuth Disclosure

Specifically, our application requests access to Google OAuth scopes to retrieve reviews for your business listings (such as via Google Business Profile APIs). This information is solely used to display reviews within your CliniEcho dashboard and to trigger WhatsApp review alert automations. We do not sell, rent, or share this data with third parties, nor do we use it for advertising purposes.

4. Meta Developer Platform & WhatsApp Data Disclosure

If you connect your Meta (Facebook/WhatsApp Business) accounts to CliniEcho:

• We request permissions to send template messages on your behalf and monitor incoming webhooks for replies.
• We store page access tokens, WhatsApp business account IDs, and phone number IDs securely using industry-standard encryption protocols.
• We use these credentials strictly to manage review alert communications and synchronize message statuses on your dashboard.

5. Meta Data Deletion Instructions

In compliance with the Meta Platform Terms, you have the right to request deletion of your account and any associated platform data. You can delete your integration or request data deletion by following these steps:

1. Navigate to your CliniEcho dashboard, open the Integrations page, and click "Disconnect" on your Meta/WhatsApp connection. This will delete all access tokens from our database immediately.
2. Alternatively, you can submit a formal Data Deletion Request via email to hello@cliniecho.com. Please specify the Meta App User ID or email address associated with your account.
3. Upon receiving your request, we will delete all Meta platform-related data (including messages, profiles, and tokens) from our active databases and backups within 30 days. We will send you an email confirmation once completed.

6. Security of Your Information

We use administrative, technical, and physical security measures to help protect your personal information. All database credentials, access tokens (Google/Meta OAuth), and API keys are stored in encrypted formats. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that no security measures are perfect or impenetrable.

7. Contact Us

If you have questions or comments about this Privacy Policy, please contact us at:

CliniEcho Support Team
Email: hello@cliniecho.com
Website: https://cliniecho.com