Privacy Policy
Last updated: August 2026
Overview
Clinqly helps service businesses capture and manage enquiries across their website widget, WhatsApp, Instagram, and Facebook Messenger. This policy describes how we handle personal data for business staff and customers who message through those channels.
Data we collect
- Location account details (email, organization and clinic names)
- Lead enquiry data from the website widget, WhatsApp, Instagram, and Facebook Messenger (name, email, phone, treatment or service interest, conversation transcripts)
- Knowledge base content uploaded by clinics to train their AI receptionist
- Technical data such as source URL and UTM parameters when provided
- Connected calendar data — free/busy times and the events Clinqlyitself creates — when a practitioner connects their Google Calendar or Microsoft Outlook calendar
How we use data
We process data to provide the service: qualifying enquiries, notifying clinic staff, sending follow-up emails configured by the clinic, and powering AI-assisted responses using clinic-specific knowledge.
Connected calendars (Google Calendar and Microsoft Outlook)
A practitioner may connect their Google Calendar or Microsoft Outlook calendar so Clinqly can schedule around their existing commitments. With their explicit authorization, we access only what is needed for this:
- Free/busy times— to read when the practitioner is busy, so the AI receptionist never offers a time they are already booked.
- Calendar events— to create, update, and delete events for Clinqlybookings only, keeping the practitioner’s calendar in step with appointments made through Clinqly.
We use this calendar data solely to provide these scheduling features. We do not use it for advertising, we do not sell it, and we do not share it with third parties except the sub-processors below strictly to operate the service. Access tokens are encrypted at rest, and a practitioner can disconnect at any time from Settings, which revokes Clinqly’s access.
Clinqly’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Sub-processors
We use Supabase (hosting and database), Resend (transactional email), Meta (WhatsApp, Instagram, and Facebook Messenger when connected by the clinic), Google (Google Calendar API, for practitioners who connect a Google calendar), Microsoft (Outlook / Microsoft Graph, for practitioners who connect an Outlook calendar), and AI/embedding providers configured for your deployment (e.g. OpenRouter, Jina). Clinics are responsible for their own channel and calendar connections and customer communications.
Analytics and cookies
We use Google Analytics to understand which pages and demos are useful to practices. Analytics cookies are only set if you accept them in the cookie banner (you can change this any time via “Cookie preferences” in the footer). Without consent, Google Analytics runs in cookieless consent mode: it receives anonymous, aggregate signals with no cookies, no identifiers and no cross-site tracking. Analytics events never include patient messages or direct identifiers such as names, email addresses or phone numbers. We also use essential cookies for sign-in and security.
Contact
Questions about this policy: hello@clinqly.io