Privacy policy

ClinicareOS is published by Venvaukt SARL, the controller of the processing described on this page. For any question about your data: [email protected].

The patient data a clinic records in ClinicareOS is under that clinic's responsibility. ClinicareOS processes it only on the clinic's behalf, under the contract between them, which names the providers involved, for example for the assisted reading of identity cards. To exercise your rights over this data, contact the clinic.

• On clinicareos.com: nothing you type. The site has no form, no cookie and no audience measurement. To display the pages, Cloudflare, which serves the site, and Google Fonts, which provides the typefaces, receive your device's IP address.
• To create an account: your name, your e-mail address, your phone number, the name and city of the facility, and a password if you choose one. The password and the quick code are stored in a form that cannot be reversed.
• If you sign in with Google: your name, your e-mail address and your Google account identifier. ClinicareOS has no access to your e-mails, contacts or documents.
• To protect sign-ins: the device and browser used, the IP address and the country derived from it, the date of each sign-in, and a technical cookie that recognises your device. The application only uses the cookies it needs to work.
• In the application: your profile photo if you add one, and what your work records under your name, such as your actions and comments.

To create and manage your account, review your sign-up request and get back to you, protect accounts and patient data (new device checks, sign-in alerts), and send you the service's e-mails and notifications. No advertising, no resale, no profiling.

• Application hosting: Oracle Cloud Infrastructure, in its Casablanca region. The application's database and files are in Morocco.
• Service e-mails: Resend, in the European Union.
• Website and domain names: Cloudflare.
• Website typefaces: Google Fonts.
• Notifications: your browser's push service (Apple, Google, Microsoft or Mozilla) carries them encrypted, without being able to read them.
• Google sign-in: Google, only if you choose it.

These providers use this data only to provide their service. Some are established outside Morocco: Resend in the European Union, Cloudflare and Google in the United States.

Your account data is kept as long as the account exists. An account is never deleted but suspended, so the records' history keeps the name of who did what. Patient data follows the clinic's retention rules.

Moroccan law 09-08 lets you access your data, have it corrected or erased if it is inaccurate, and object to its processing on legitimate grounds. Write to [email protected]. You can also contact Morocco's data protection authority, the CNDP, www.cndp.ma.

Encrypted connections, access by role, screen lock after a period of inactivity, new device checks, sign-in alerts and an encrypted backup every night.

Any change to this page is dated at the top of the page.