Privacy Policy

Introduction

Iskaria ("we", "our", "us") helps clinics get patients from ads and search and keep them once they have called. This policy explains what information we collect when you visit iskaria.com, contact us directly, or message a WhatsApp, Instagram or Facebook Messenger account that we operate, how we use it, and the choices you have.

Information we collect from you directly

When you email us or message us on WhatsApp, we collect the details you provide, typically your name, email address, phone number, clinic or company, and the nature of your enquiry. This website does not have a contact form or user accounts.

Website visits

iskaria.com is hosted on Vercel. Like most hosts, Vercel processes technical data such as IP address, browser type and the pages requested in order to deliver the site and keep it secure. We use Vercel Web Analytics to count visits and clicks on buttons such as WhatsApp, email and booking a call. It does not use cookies and does not track you across websites or build a profile of you. We do not use advertising cookies, the Meta Pixel or Google Analytics on this website. If that changes, we will update this policy first.

WhatsApp, Instagram and Messenger messaging

We operate a shared inbox that lets clinics and their staff send and receive WhatsApp, Instagram and Facebook Messenger messages, using Meta's WhatsApp Business Platform (Cloud API), the Instagram Messaging API and the Messenger Platform. This applies to accounts we run for ourselves and to accounts we run on behalf of client clinics. When you message such an account, we receive and store your message content and any media you send, your phone number, Instagram handle or Facebook profile, your profile name and profile picture, and message timestamps and delivery status. A profile picture is copied to our own document storage so it keeps working after Meta's temporary link expires. We use this to show the conversation to the staff who handle it, to send replies, follow-ups and appointment reminders, and to report to the clinic on how enquiries are handled. If you have previously messaged a number that is connected to our platform, your earlier conversation history and contact details may be synchronised into it. We do not use your messages for advertising to you, and we do not sell them.

Our role when we act for a clinic

When we operate messaging for a client clinic, the clinic decides why and how your information is used, and we process it on the clinic's behalf and on its instructions. The clinic is responsible for how it uses your information in the care it provides to you. For messages sent to Iskaria's own accounts and for our own enquiries, we are responsible for the information.

Google account data (Connect Google)

A clinic administrator can connect the clinic's Google account to the Iskaria console (Settings, Clinic setup, Google) so that we can show the clinic how its Google Business Profile listing, website search results and website traffic are doing. This only happens after the administrator signs in with Google and approves the permissions shown on Google's consent screen. The clinic can use Iskaria without connecting Google.

• What we access: Google Business Profile (the accounts and locations the clinic manages, the listing details and reviews); Google Search Console, read-only (the sites the clinic owns and their search clicks, impressions, queries and pages); Google Analytics, read-only (the accounts and properties the clinic has access to and their traffic reports, such as sessions and users by channel); and the email address of the Google account that was connected, so the clinic can see which account it is.
• How we use it: only to show these figures to that clinic's authorised users inside its own Iskaria account, and to provide and improve these features for that clinic. We do not change anything in the clinic's Google accounts.
• What we do not do: we do not sell this data, use it for advertising, or use it to build profiles of individual people. We do not use it to develop, improve or train generalised artificial intelligence or machine learning models.
• Who can see it: the clinic's authorised users, and Iskaria staff only when the clinic asks for support, when it is needed for security or to comply with the law, or in aggregated and anonymised form. It is processed only by the service providers that host and run Iskaria, for the purposes above.
• Storage and security: reports are read from Google when a user opens them and are not stored by us. We store only the access granted by Google (a refresh token), encrypted, and the connected email address. Data is sent over encrypted connections.
• Limited Use: Iskaria's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
• Removing access: an administrator can press Disconnect in Settings at any time. We then revoke our access with Google and delete the stored token immediately. Access can also be removed at https://myaccount.google.com/permissions. To ask us to delete any Google data we hold for a clinic, email ibrahim@iskaria.com; we confirm deletion in writing.

How we use information

We use information to respond to enquiries, to provide and support the messaging and reporting services described above, to keep our systems secure, and to meet legal obligations. We may use aggregated information that does not identify anyone to understand how our services are used.

Automated handling

Some messages are handled, or assisted, by automated systems including AI models, so we can reply quickly and route each enquiry to the right person. A member of staff can review and take over any conversation, and automated replies are never used to make decisions about your care. You can always ask to speak to a person.

Advertising measurement

When someone reaches us from one of our adverts, we may send Meta a hashed, non-identifying signal (a hashed phone number together with the ad-click identifier) and an event such as a confirmed booking. We use this only to measure and improve our advertising. It does not include your message content, and we do not sell it.

Sharing

We do not sell personal information. We share it only with the service providers we need in order to run the service, and only to the extent needed. These include Meta (to send and receive WhatsApp, Instagram and Facebook Messenger messages, and to measure advertising); Zoho (CRM, Cliq and WorkDrive, where we store conversations and media); Google and DeepSeek (the AI models that help draft and summarise messages); Upstash (our data store); and Vercel (hosting). We may also disclose information where the law requires it. Where we act for a clinic, the clinic can access the conversations on its own accounts.

Retention

We keep messaging data for as long as the client clinic uses our service, or as long as needed to answer your enquiry and meet legal obligations. We delete or return it when the clinic ends the service, or earlier when you ask us to delete it as described on our data deletion page. We may keep limited records where the law requires it.

Data storage and security

Your information is stored securely and is accessible only to authorised personnel of Iskaria and, for conversations on a clinic's account, the authorised staff of that clinic. We take reasonable technical and organisational measures to protect it against unauthorised access, loss, or misuse.

Your rights and data deletion

You can ask to see, correct, or delete the personal information we hold about you. To ask for deletion, follow the steps on our data deletion page at iskaria.com/data-deletion, or contact us using the details below. If you messaged a clinic's account, we will help route your request to that clinic.

Changes to this policy

We may update this policy from time to time to reflect changes in our practices or for legal reasons. The "Last updated" date above shows when it was last revised.

Contact

Iskaria

Email: ibrahim@iskaria.com

WhatsApp: +91 81369 30719