Privacy Policy

This Privacy Policy describes how aicrely (“we”, “us”, “our”) collects, uses, stores, and protects information when you use our website (aicrely.com) and our AI-powered WhatsApp CRM platform (“Service”) provided to healthcare practices such as clinics, hospitals, and diagnostic centers.

1. Information We Collect

• Account information — name, email address, phone number, clinic/business name, and login credentials of Service users (clinic staff).
• Lead & patient records entered into the CRM — names, phone numbers, email addresses, city, appointment details, service interests, notes, and communication history that our customers (healthcare practices) store while using the Service.
• WhatsApp & Meta data — when a customer connects their Facebook Page or WhatsApp Business Account, we receive data via Meta’s APIs, such as lead form submissions (Facebook Lead Ads), WhatsApp message content sent to and from the connected business number, message delivery status, and business account identifiers (Page ID, WhatsApp phone number ID).
• Payment information — payments are processed by our payment partner (e.g., Razorpay); we store transaction references and status, never full card details.
• Technical data — IP address, browser type, device information, and usage logs for security and performance.

2. How We Use Information

• To provide and operate the CRM — capturing leads, sending WhatsApp messages, booking appointments, reminders, and follow-ups on behalf of the connected healthcare practice.
• To route incoming WhatsApp messages and Facebook leads to the correct customer’s CRM account.
• To improve the Service, prevent abuse, and provide customer support.
• To send service-related communication (billing, updates, security notices).

We do not sell personal data. We do not use patient data for advertising.

3. AI Features

Some features use AI services (such as Google Gemini) to generate suggestions like message drafts, chat summaries, and lead prioritisation. Only the minimum necessary text is shared with the AI provider for processing, and these features can be disabled by the customer in Settings.

4. Data from Meta Platforms

Our use of data received from Meta’s APIs (Facebook Login, Lead Ads, WhatsApp Business Platform) complies with the Meta Platform Terms and Developer Policies. Such data is used only to provide the Service to the business that connected its account, and is never sold or used for any other purpose. You may disconnect your Facebook Page or WhatsApp Business Account at any time from the Service settings or from your Facebook settings, which stops further data access.

5. Data Storage & Security

• Data is stored on secured servers with access controls; each customer’s data is kept in a separate database.
• Transport encryption (HTTPS/TLS) is used for all traffic.
• Passwords are stored using strong one-way hashing (bcrypt).
• Login attempts are rate-limited; access to patient data is role-based within each practice.

6. Data Retention & Deletion

We retain data for as long as the customer’s account is active. Customers can delete individual records inside the CRM at any time. On termination of service, a customer may request complete deletion of their database. For deletion of your personal data, see our Data Deletion Instructions or email us at info@aicrely.com — we action verified requests within 30 days.

7. Third-Party Services

The Service integrates with: Meta Platforms (Facebook, WhatsApp Business Platform), Google (Gemini AI, Google Business Profile, YouTube APIs where enabled), and Razorpay (payments). Each processes data under its own privacy policy.

8. Patients’ Rights

If you are a patient whose details were entered into a healthcare practice’s CRM, that practice is the primary controller of your data. You may contact the practice directly, or email us at info@aicrely.com, to request access to or deletion of your information.

9. Children

The Service is intended for use by businesses and their staff, not by children under 18. We do not knowingly collect data directly from children; patient records of minors are managed by the treating healthcare practice as the data controller.

10. Changes to this Policy

We may update this policy from time to time. The “Last updated” date above reflects the latest version. Material changes will be communicated to customers by email or in-app notice.

11. Contact Us

aicrely
Email: info@aicrely.com
Website: aicrely.com