Privacy Policy

Draft: review with legal counsel before launch.

This Privacy Policy explains how MAA Tech (“we”, “us”) handles information in connection with the Clinicos clinic software. It applies to the clinics that subscribe to Clinicos and to the people whose data those clinics manage.

Who controls the data

The clinic is the controller of its patients' data. Clinicos acts as the processor: we store and process data on the clinic's behalf and under its instructions, and we do not use patient data for our own purposes.

What we store

• Clinic account details (clinic name, locations, staff logins).
• Operational records the clinic creates: leads, patients, appointments, encounters, prescriptions, pharmacy inventory and invoices.
• Files the clinic uploads (for example logos, medicine photos and documents), stored in encrypted object storage.
• Technical logs needed to run and secure the service. We do not place patient clinical data in generic logs or analytics.

How data is protected

• Each clinic's data is isolated from every other clinic.
• Data is encrypted in transit and at rest, and backed up daily.
• Access is restricted by role and is auditable.

Sharing

We do not sell data. We share it only with infrastructure providers strictly needed to run the service (hosting and storage), and only as required to provide Clinicos. Marketing channels such as WhatsApp are used only when a clinic enables them, and clinical data is never sent to marketing systems.

Data deletion

A clinic can request export or deletion of its data at any time by emailing ahmad@maatechllc.com. We delete data within a reasonable period after a verified request, subject to any legal retention requirements.

Contact

Questions about this policy: ahmad@maatechllc.com · +92 335 1690278.