Privacy Policy

2. Information We Collect

Depending on how you interact with Mr.Genious HMS, we may collect or receive the following categories of information.

2.1 Contact and Business Information

We may collect:

• Name
• Phone number
• Email address
• Business or clinic name
• Clinic/hospital address
• Job title or role
• Business-related information
• Information provided when requesting a demonstration or contacting our team

2.2 WhatsApp Information

When a business connects its WhatsApp Business account with Mr.Genious HMS, our systems may receive information made available through the WhatsApp Business Platform, including:

• WhatsApp phone number;
• Display name;
• WhatsApp messages sent to or received through the connected business account;
• Message timestamps;
• Message identifiers;
• Delivery and message status information;
• Media or attachments transmitted through WhatsApp, where applicable;
• Information necessary to process and respond to WhatsApp conversations;
• WhatsApp Business Account and phone-number identifiers;
• Webhook and technical information associated with WhatsApp communications.

We process this information only for the purposes described in this Privacy Policy and for providing the functionality requested by the business using Mr.Genious HMS.

3. Healthcare and Patient Information

Mr.Genious HMS is healthcare management software and may be used by clinics, hospitals, doctors, and other healthcare organizations.

Depending on the features enabled by a customer, information processed through the platform may include information relating to patients, appointments, billing, prescriptions, medical records, or other healthcare-related information.

Where healthcare or patient information is processed through the Mr.Genious HMS application, such processing is performed as part of providing services to the healthcare organization using the platform and is subject to the applicable contractual, security, and legal requirements governing that service.

4. How We Use Information

We may use information we collect to:

• Respond to enquiries and demo requests;
• Provide and operate Mr.Genious HMS;
• Provide WhatsApp communication functionality;
• Send and receive WhatsApp messages on behalf of businesses using our platform;
• Manage appointments and customer communications where those features are enabled;
• Provide customer support;
• Authenticate users and maintain account security;
• Maintain and improve our services;
• Monitor and prevent fraud, abuse, and unauthorized access;
• Troubleshoot technical problems;
• Maintain system logs and security records;
• Communicate important service-related information;
• Comply with applicable legal and regulatory obligations.

We do not use WhatsApp message content for purposes unrelated to providing or improving the requested service unless permitted by applicable law and our contractual arrangements.

5. WhatsApp and Meta Integration

Mr.Genious HMS may integrate with services provided by Meta, including the WhatsApp Business Platform and WhatsApp Cloud API.

When a business chooses to connect its WhatsApp Business account to Mr.Genious HMS, information may be transmitted between WhatsApp/Meta and our systems through the APIs and webhooks made available by Meta.

This may include WhatsApp account information, phone numbers, message content, message status information, timestamps, identifiers, and other information necessary for the integration to operate.

The use of WhatsApp is also subject to WhatsApp's applicable terms, policies, and privacy practices.

Mr.Genious HMS does not control the privacy practices of Meta or WhatsApp. Users should review the applicable Meta and WhatsApp policies for information about how Meta processes information on its services.

6. How We Share Information

We may share or provide access to information with:

Service Providers

We may use trusted third-party service providers for services such as:

• Cloud hosting;
• Database infrastructure;
• Application infrastructure;
• Email delivery;
• WhatsApp/Meta integration;
• Authentication;
• Security;
• Analytics;
• Technical support.

These providers receive only the information reasonably necessary to provide their services.

Meta / WhatsApp

Where a customer enables WhatsApp integration, information may be exchanged with Meta through the WhatsApp Business Platform and related APIs.

Legal Requirements

We may disclose information where reasonably necessary to:

• Comply with applicable law;
• Respond to lawful requests;
• Protect our rights or property;
• Investigate security incidents;
• Prevent fraud or misuse;
• Protect the safety of users or others.

We do not sell personal information.

7. WhatsApp Message Data

For businesses using our WhatsApp integration, message information may be processed to provide features such as:

• Customer communication;
• Appointment-related communication;
• Notifications;
• Customer support;
• Automated responses;
• Business enquiries;
• Other communication workflows configured by the business.

Businesses using Mr.Genious HMS are responsible for ensuring that their use of WhatsApp and the information they communicate through the platform complies with applicable laws, their customers' rights, and applicable WhatsApp/Meta policies.

8. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• Provide our services;
• Maintain customer accounts;
• Provide customer support;
• Maintain business and transaction records;
• Maintain security and audit records;
• Resolve disputes;
• Comply with applicable legal obligations.

The specific retention period may depend on the type of information and the services being used.

When information is no longer required, we may delete, anonymize, or securely dispose of it, subject to applicable legal or contractual requirements.

9. Data Security

We use reasonable technical and organizational measures designed to protect information against unauthorized access, disclosure, alteration, loss, or misuse.

Security measures may include:

• Access controls;
• Authentication mechanisms;
• Encryption where appropriate;
• Secure API communication;
• Monitoring and logging;
• Role-based access controls;
• Infrastructure security controls;
• Regular security maintenance.

However, no internet-based service or electronic storage system can be guaranteed to be completely secure.

10. Data Deletion and Removal Requests

You may request deletion of personal information that we hold about you, subject to applicable legal, contractual, security, and record-retention requirements.

To request deletion of your information, please contact us using the details below.

Data Deletion Request

Email: [PRIVACY EMAIL ADDRESS]

Please include:

• Your name;
• Phone number or email address associated with the account;
• The business/clinic associated with your account, if applicable;
• A description of your deletion request.

We may request additional information reasonably necessary to verify the request and protect against unauthorized deletion requests.

After verifying the request, we will process the deletion in accordance with applicable requirements.

11. Your Privacy Choices

Depending on applicable law, you may have rights regarding your personal information, including the ability to:

• Request access to information we hold about you;
• Request correction of inaccurate information;
• Request deletion of certain information;
• Ask questions about our processing of information;
• Withdraw certain communications preferences.

Some information may need to be retained where required for legal, security, contractual, or legitimate business purposes.

12. Children's Privacy

Mr.Genious HMS is intended for businesses, healthcare organizations, professionals, and other adult users.

Our marketing website is not intended to knowingly collect personal information directly from children.

If you believe that a child has provided personal information to us, please contact us so that we can review and take appropriate action.

13. Third-Party Services

Our website and services may use third-party services and infrastructure providers.

These services may include providers used for:

• Website hosting;
• Cloud infrastructure;
• WhatsApp/Meta integration;
• Email;
• Analytics;
• Authentication;
• Security;
• Customer communication.

Third-party providers may process information according to their own privacy policies and applicable agreements.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our services, technology, legal requirements, or data-processing practices.

When we make changes, we will update the "Last Updated" date at the beginning of this policy.

We encourage users to periodically review this page for the latest version.

15. Contact Us

If you have questions about this Privacy Policy, our data practices, WhatsApp integration, or wish to submit a privacy or data-deletion request, please contact us: