Privacy Policy

At CarelyCloud we take data privacy very seriously. This policy explains what information we collect, how we use it, and what rights you have over it. By using our platform, you accept the practices described in this document.

1. Data controller

The data controller is CarelyCloud. For any privacy-related inquiry, you can contact us at soporte@carelycloud.com.

2. Data we collect

2.1 Practitioner and clinic data

• Full name, email address, and password (encrypted).
• Clinic or practice name, time zone, and account settings.
• Billing information (plan, subscription dates).
• Activity and access logs (audit logs).

2.2 Patient data (entered by practitioners)

Practitioners enter their patients' data into the platform. CarelyCloud acts as the data processor and the practitioner is the data controller. This data may include:

• Patient name, phone number, and email address.
• Appointment history and internal clinical notes.
• Attachments uploaded by the practitioner.

2.3 Technical data

• IP address and device/browser type when accessing the platform.
• Technical cookies required for the service to function.

3. Purpose of processing

We use the data we collect exclusively to:

• Provide and improve the appointment and patient management service.
• Send notifications and reminders related to platform use.
• Manage the commercial and support relationship with the customer.
• Comply with legal obligations and prevent fraud.
• Ensure the security and integrity of the platform.

We never use your data for third-party advertising, and we never sell it under any circumstances.

4. Sharing data with third parties

CarelyCloud may share data with infrastructure and technical service providers strictly necessary to operate the platform (for example, hosting providers and transactional email services). All of them are bound by confidentiality agreements and only process data per our instructions.

We do not share data with advertisers, data brokers, or any commercial third party.

5. Data security

We implement technical and organizational measures to protect your information, including:

• Password encryption with bcrypt (never stored in plain text).
• Encrypted communications via HTTPS/TLS.
• Session tokens with automatic expiration.
• Audit logging of sensitive actions.
• Strict data separation between clinics (multi-tenant architecture).

6. Data retention

Data is retained while the account is active. After cancellation, data is kept for 30 days to allow for reactivation or export, after which it is permanently deleted from our systems.

7. Your rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (right to be forgotten).
• Export your data in a portable format.
• Object to the processing of your data in certain circumstances.

To exercise any of these rights, email us at soporte@carelycloud.com. We will respond within a maximum of 10 business days.

8. Cookies

CarelyCloud only uses essential technical cookies required for the user's session to function. We do not use tracking cookies, third-party analytics, or behavioral advertising.

9. Changes to this policy

We may update this Privacy Policy periodically. Substantial changes will be notified by email with at least 15 days' notice. The current version is always available on this page along with its update date.