Version 2026-10-17 · draft
Privacy policy
Courtesy translation of a draft under legal review; the Spanish version prevails (Paraguay: Law 7593/2025 on personal data protection, expected to take effect in late 2027; plus the rules of the patients' countries of residence).
Controller
Dr. Giulianna Davoli Benedetti · giu.davolibenedetti@gmail.com · [address].
What data we process and why
- Medical care: identification, contact details, medical record, documents and measurements you upload.
- Appointments and payments: administrative and payment data and the receipts you attach (we don't store card numbers).
- AI transcription (optional): only with your permission for each visit; transcripts are kept for up to [90] days.
- Reminders and educational materials: according to your preferences.
- Commercial messages about the book: a separate database, only with express permission.
Who we share it with
Providers needed to deliver the service (hosting, database, video, email, Google sign-in if you choose it and, if you allow it, AI), with access limited to their role: [list of providers and countries]. Data may be hosted outside your country of residence.
Security
Role-based access with two-step verification for staff, separation of clinical and commercial data, an audit log and short-lived private download links.
Your rights
You can request access, correction, export or deletion from “Preferences & access” in the portal or by email. Medical records may have legal retention periods.
Retention
Medical records: as required by applicable health regulations. Transcripts: up to [90] days. Commercial conversations: [24] months from the last contact.