Privacy Policy
Last Updated: January 16, 2026
1. Introduction
Reto Clinic Bot ("we", "our", or "us") operates an AI-powered appointment scheduling service via WhatsApp for dental clinics. This Privacy Policy explains how we collect, use, and protect your information.
2. Information We Collect
From Patients:
- Phone number (from WhatsApp)
- Name and contact information you provide
- Appointment details (date, time, service requested)
- Conversation history for service improvement
From Clinics:
- Clinic information and contact details
- Provider schedules and availability
- Google Calendar access (OAuth tokens) for appointment management
3. How We Use Your Information
- To schedule and manage appointments
- To communicate with patients via WhatsApp
- To sync appointments with clinic calendars
- To improve our AI assistant's responses
- To maintain service security and prevent abuse
4. Data Storage and Security
We use industry-standard encryption and security practices:
- All data is stored in secure Google Cloud Firestore databases
- OAuth tokens are encrypted and stored securely
- We implement HIPAA-compliant data handling practices
- Access to patient data is restricted to authorized personnel only
5. Data Sharing
We do NOT sell or share your personal information with third parties except:
- With the clinic you're booking an appointment with
- With service providers necessary for operation (Google Calendar, WhatsApp/YCloud)
- When required by law or legal process
6. Google Calendar Integration
We use Google OAuth to access clinic calendars for appointment scheduling. We only:
- Read calendar availability
- Create appointment events
- Update or delete appointments when patients request changes
We do NOT access or store any other calendar data unrelated to appointments booked through our service.
7. Data Retention
We retain your information as long as:
- Your appointment is active or scheduled
- Required for operational purposes
- Required by law
You may request deletion of your data by contacting the clinic directly.
8. Your Rights
You have the right to:
- Access your personal information
- Request correction of inaccurate data
- Request deletion of your data
- Opt-out of communications
9. Children's Privacy
Our service is not directed to individuals under 18. We do not knowingly collect information from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date.
11. Contact
For privacy concerns or questions, please contact your clinic directly or reach out to us at the contact information provided by your clinic.
← Back to Home