Privacy Policy
Last updated: August 3, 2026
This Privacy Policy explains how Qanat Digital ("we," "us," "our") collects, uses, and protects information when you interact with our WhatsApp-based appointment booking assistant ("the Service"), including via WhatsApp Business Messaging, and applies to every clinic that uses the Service.
1. Information We Collect
When you message a clinic on WhatsApp or use our booking service, we may collect: your name and WhatsApp phone number; the text of messages you send, including appointment requests, reason for visit, and questions you ask; appointment data such as service requested, preferred or booked date and time, assigned doctor, and appointment status; and technical metadata such as message timestamps and delivery status via the WhatsApp Business Platform. We do not ask for or require detailed medical records, diagnoses, insurance details, or payment card information through WhatsApp — please avoid sharing detailed medical history in chat beyond what is needed to book an appointment.
2. How We Use Your Information
We use the information you provide to respond to your messages and answer questions about clinic services; check appointment availability and book, reschedule, or cancel appointments on your behalf; send appointment confirmations and reminders; allow clinic staff to review and manage conversations and bookings; and improve the accuracy and quality of our automated assistant.
3. How We Share Information
We do not sell your personal information. We share it only with: Meta / the WhatsApp Business Platform, to send and receive your messages; OpenAI, our AI processing provider, which receives message content via API to generate responses and determine booking actions; our hosting and database providers, to store and process data securely; the specific clinic you are messaging, whose staff can view your conversation and appointment history to serve you; and authorities, if required by law.
4. AI-Generated Responses — Important Limitations
Replies are generated automatically by an AI assistant. They are provided to help you book, reschedule, or ask about appointments, and are not medical advice, a diagnosis, or a substitute for professional medical judgment. The assistant can make mistakes. Always confirm appointment details that matter to you directly with clinic staff, and if you have a medical emergency, contact your local emergency services or the clinic directly rather than relying on a WhatsApp message.
5. Data Retention
We retain conversation and appointment data for as long as necessary to provide the Service and meet the clinic's record-keeping and legal obligations. You may request deletion of your data at any time — see Section 7.
6. Data Security
We use encryption for sensitive stored data, such as account credentials, and access controls limiting who can view patient conversations to authorized clinic staff. No method of transmission or storage is 100% secure, but we take reasonable steps to protect your information.
7. Your Rights
Depending on your location, you may have the right to request a copy of the personal data we hold about you, request correction of inaccurate data, request deletion of your data, or object to or restrict certain processing. To exercise these rights, contact us at saleh.saleh96q@gmail.com. Because each clinic controls its own patients' records, we may direct your request to the relevant clinic to action.
8. Children's Privacy
Our Service is not directed at children under 13 (or the relevant age of digital consent in your jurisdiction) without the involvement of a parent or guardian booking on their behalf.
9. International Data Transfers
Your information may be processed in countries other than your own, including where our hosting and AI providers operate. We take steps to ensure appropriate safeguards are in place.
10. Limitation of Liability
The Service is provided "as is" and "as available." To the maximum extent permitted by law, Qanat Digital is not liable for indirect, incidental, or consequential damages, missed or incorrect appointments arising from AI or third-party service errors, or events outside our reasonable control (including outages of WhatsApp, Meta, or our AI or hosting providers). Each participating clinic remains responsible for its own medical services, the accuracy of the information it provides us, and its compliance with healthcare regulations applicable to it.
11. Governing Law
This Privacy Policy is governed by the laws of the United Arab Emirates, without regard to conflict-of-law principles, unless a mandatory law in your country of residence provides otherwise.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.