🔒 Privacy Policy

Welcome to CLNEXA ("we," "our," "us"). We are committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our clinic management platform at clnexa.com.

By using CLNEXA, you agree to the practices described in this policy. If you disagree, please discontinue use of the service.

Account & Clinic Information

• Full name, email address, and password (stored encrypted via bcrypt)
• Clinic name, phone number, address, and branding assets
• Payment details (processed by our secure payment partner — card numbers are never stored by CLNEXA)

Clinic & Patient Data

As part of operating the platform, you may enter patient and clinical data including names, contact details, medical history, appointments, treatment plans, invoices, and prescriptions. This data belongs to you.

Automatic Usage Data

• IP address and browser/device type
• Pages visited and features used (anonymized)
• Error logs and performance diagnostics

• Provide, operate, and improve the CLNEXA platform
• Process subscription payments and send billing confirmations
• Send appointment reminders and transactional notifications on your behalf
• Respond to support requests and resolve issues
• Send important product updates and security notices
• Analyze anonymized usage patterns to improve features
• Comply with applicable Egyptian and international laws

All data is stored on secure servers. We implement industry-standard security measures:

• AES-256 encryption for data at rest
• TLS 1.3 encryption for all data in transit
• Role-based access control within your clinic account
• Regular automated backups (Enterprise plans)
• Routine security reviews and access audits

We do not sell your personal data. We share information only in limited circumstances:

• Service providers: Trusted partners (payment processors, email services) under strict data processing agreements
• Legal requirements: When required by Egyptian or international law, court order, or government authority
• Business transfers: In the event of a merger or acquisition, under the same privacy protections

We use essential session cookies to maintain your login state. We use anonymized analytics to understand how the platform is used and improve it. You can control cookie settings in your browser, though disabling essential cookies may affect functionality.

• Account data is retained while your account is active
• After deletion: account data removed within 30 days, backup copies purged within 90 days
• Anonymized analytics may be retained indefinitely
• Financial records retained for 7 years as required by Egyptian tax law

You have the right to access, correct, or request deletion of your data; object to certain processing; and withdraw consent. To exercise these rights, email us at privacy@clnexa.com.

We may update this Privacy Policy periodically. We will notify you of material changes via email or a prominent platform notice at least 14 days before changes take effect.

• Privacy inquiries: privacy@clnexa.com
• General support: support@clnexa.com
• Address: CLNEXA, Cairo, Arab Republic of Egypt
• Contact form: clnexa.com/contact