Privacy Policy

When you message a clinic through the web chat, SMS, WhatsApp, or a phone call, we process the content of your messages and the details needed to serve your request — for example your name, contact number, and appointment preferences. This information is processed on behalf of the clinic you are contacting, which is the controller of your health information.

Clinics using Clinic Agent are covered entities under HIPAA, and Clinic Agent acts as their business associate. Health information is used only to provide the receptionist service to that clinic, is access-controlled and audited, and is never sold. De-identification is applied before any message is sent to a third-party AI model, and only providers under a Business Associate Agreement are used on any path that could carry health information.

SMS and voice are carried by Twilio under a Business Associate Agreement. Some general (non-clinical) confirmations may be sent over WhatsApp at the clinic's direction. You can opt out of text reminders at any time by replying STOP.

Records are retained for the period the clinic and applicable law require (health records are retained for at least six years). To access, correct, or delete your information, contact the clinic directly — they can action your request, including export and deletion, through their dashboard.

For questions about how a specific clinic uses your information, contact that clinic. For questions about the Clinic Agent platform, reach us through the clinic that referred you.