Privacy Policy

1. Introduction

Clinora ("we," "us," or "our") operates the Clinora platform accessible at https://clinora.ai (the "Service"). Clinora is an AI-powered call center and communication platform that helps clinics and service businesses manage calls, book appointments, qualify leads, and communicate with customers across multiple channels, including Instagram.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By accessing or using Clinora, you agree to this Privacy Policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, phone number, company name, and password when you create an account.
• Business Information: Details about your business, industry, services offered, and operational preferences used to configure AI agents.
• Payment Information: Billing details processed through our third-party payment processor. We do not store full credit card numbers.
• Communications: Messages, feedback, and support requests you send to us.

2.2 Information Collected Through Integrations

When you connect third-party services to Clinora, we collect data necessary to provide the integration functionality:

• Instagram Integration: When you connect your Instagram Professional account, we access your Instagram profile information (username, profile picture, account ID), direct messages sent to your business account, and message metadata. We use this data solely to enable you to view and respond to Instagram messages through the Clinora dashboard and to power AI-assisted responses on your behalf.
• Calendar Integration: Calendar availability and appointment data to enable scheduling functionality.
• Phone/Voice Integration: Call recordings, call metadata, and transcriptions to provide AI call center functionality.

2.3 Automatically Collected Information

• Usage Data: Pages visited, features used, actions taken, timestamps, and interaction patterns.
• Device Information: Browser type, operating system, device identifiers, and screen resolution.
• Log Data: IP address, access times, referring URLs, and error logs.
• Cookies and Similar Technologies: We use cookies, local storage, and similar technologies to maintain sessions, remember preferences, and analyze usage.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Process and manage your integrations, including Instagram messaging and calendar scheduling.
• Power AI agents that handle calls, messages, and customer interactions on your behalf.
• Improve, personalize, and develop new features for the Service.
• Communicate with you about updates, security alerts, and support.
• Analyze usage trends and monitor the effectiveness of the Service.
• Detect, prevent, and address fraud, abuse, and technical issues.
• Comply with legal obligations.

4. Instagram Data Use Disclosure

Clinora integrates with Instagram through the Meta (Facebook) platform. When you authorize the Instagram integration, we request the following permissions:

• instagram_business_basic: To access your Instagram Professional account profile information.
• instagram_business_manage_messages: To read and send messages on behalf of your business account through the Clinora dashboard.

We use Instagram data exclusively to:

• Display incoming Instagram direct messages in the Clinora dashboard.
• Enable you (and your configured AI agents) to respond to customer messages.
• Provide analytics on message volume and response times.

We do not:

• Sell Instagram data to third parties.
• Use Instagram data for advertising, profiling, or purposes unrelated to the Service.
• Transfer Instagram data to third parties except as necessary to provide the Service (e.g., cloud hosting infrastructure).
• Store Instagram messages longer than necessary to provide the Service, subject to your account retention settings.

5. How We Share Your Information

We do not sell your personal information. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party vendors who assist us in operating the Service (e.g., cloud hosting, payment processing, analytics). These providers are contractually obligated to protect your data.
• Legal Requirements: When required by law, regulation, legal process, or governmental request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction.
• With Your Consent: When you explicitly authorize us to share information with a third party.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. When you delete your account, we will delete or anonymize your data within 90 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, legal compliance).

Instagram message data is retained for the duration of your active integration. You may disconnect the Instagram integration at any time from your dashboard settings, after which stored Instagram data will be deleted within 30 days.

7. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption of data in transit (TLS/SSL) and at rest.
• Access controls and authentication mechanisms.
• Regular security audits and vulnerability assessments.
• Secure cloud infrastructure with data redundancy.

No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request your data in a structured, commonly used format.
• Withdraw Consent: Revoke consent for data processing where consent is the legal basis.
• Object: Object to processing of your data for certain purposes.

To exercise any of these rights, contact us at privacy@clinora.ai. We will respond within 30 days.

9. Third-Party Services

The Service may contain links to or integrate with third-party services (e.g., Meta/Instagram, Google Calendar). These services have their own privacy policies, and we are not responsible for their practices. We encourage you to review their privacy policies before connecting your accounts.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

11. Children’s Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will take steps to delete it promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Effective Date" above. Your continued use of the Service after changes constitutes acceptance of the revised policy.

13. Data Deletion Instructions

You may request deletion of your data at any time by:

• Navigating to Dashboard > Settings and selecting "Delete Account."
• Sending a deletion request to privacy@clinora.ai.

Upon receiving a verified deletion request, we will remove your personal data within 90 days, including any Instagram data associated with your account.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

• Email: privacy@clinora.ai
• Website: https://clinora.ai