Privacy Policy

1. Who we are

This policy explains how VEXRA INFORMATION TECHNOLOGY SERVICE ("VEXRA", "we") handles personal data. We are based in the United Arab Emirates.

We act in two roles:

• Website visitors and pilot requests. When you use vexra.ae or request a pilot, VEXRA is the controller of your data.
• VEXRA Clinic conversations. When a patient messages a clinic on WhatsApp, Instagram or Facebook and that clinic uses VEXRA Clinic, the clinic is the controller. VEXRA processes the data only on the clinic's instructions.

2. Data we collect

Pilot requests on the website

The pilot form does not send anything to our servers. It opens WhatsApp with a prefilled message (clinic name, emirate, number of doctors and your WhatsApp number), and you send that message to us yourself through WhatsApp, a Meta service. We then receive it in WhatsApp, together with your WhatsApp profile name and number. If you don't send the message, we receive nothing.

VEXRA Clinic conversations (on behalf of clinics)

• Name or profile name.
• Phone number or platform-scoped ID.
• Message content and attachments.
• Appointment details: service, doctor, date and time.
• Handover notes written for clinic staff.

Messages may contain health information. We treat all message content as sensitive data.

Technical data

Technical logs, device and browser information, and IP address, used to deliver and secure the website and the service.

The website also sends anonymous diagnostics so we can find faults: the page, a coarse browser and operating-system label (for example "iOS Safari"), whether the opening animation loaded, and script error messages. These diagnostics use no cookies and contain no identifiers.

3. Why we use it

• To reply to patients, and to book, reschedule and cancel appointments on the clinic's behalf.
• To hand conversations over to clinic staff.
• To keep the service secure and to check its quality.
• To follow up on pilot requests.

We do not sell personal data, and we do not use it for advertising. VEXRA does not use personal data to train AI models.

4. Legal bases

We process personal data under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021). For pilot requests we rely on your consent, which you can withdraw at any time. For VEXRA Clinic conversations, the clinic decides the legal basis as controller.

5. Service providers

We use the following providers to run the website and VEXRA Clinic:

The clinic that a patient contacts also receives that patient's conversation.

6. Where data is stored

• Website: Vercel, Mumbai, India.
• VEXRA Clinic platform: Supabase, Mumbai, India.
• OpenAI and Anthropic process data on their own infrastructure outside the UAE.

7. How long we keep it

• Pilot requests: 12 months.
• VEXRA Clinic conversations: as set in each clinic's agreement.
• Technical logs: 90 days.

After these periods the data is deleted.

8. Security

• Data is encrypted in transit (HTTPS).
• Access is limited to the people and systems that need it (least privilege).
• Secret keys stay on our servers and are never sent to the browser.

9. Your rights

You can ask to access, correct or delete your data, object to how we use it, or withdraw your consent.

To do this, email support@vexra.ae or message us on WhatsApp (+971 55 256 4956). Tell us the phone number or profile you used and, for VEXRA Clinic, the clinic's name. We acknowledge your request within 72 hours and complete it within 30 days.

If you messaged a clinic, you can also contact that clinic directly.

10. Data deletion

You can ask us to delete your data at any time. Every request gets a confirmation code. The steps, what is deleted and the timeline are on our data deletion page.

11. WhatsApp

• We only message people who shared their number and agreed to be contacted.
• To stop messages, reply STOP or contact us.
• We always honour opt-outs and blocks.

12. Children

The website and VEXRA Clinic are not directed at children. Appointments for minors are made by a parent or guardian through the clinic.

13. Cookies and storage

• We use essential storage only: your light or dark theme choice, saved in your browser (localStorage).
• We use no advertising cookies.
• Analytics: Vercel Speed Insights only (anonymous performance metrics, no cookies). No other analytics.

14. Changes and contact

We may update this policy. The date at the top shows the current version. For any question, email support@vexra.ae or message us on WhatsApp.