Who we are and our role
Tansiq AI is a cloud service for clinics. For the clinic’s clients and their conversations, the clinic is the controller and we process that data on its behalf and on its instructions. For the accounts of the clinic’s team, we are the controller.
What we collect
- Account data: name, email, role and permissions, and sign-in records for security.
- Clinic data: services, prices, opening hours, team, and the information you give the receptionist.
- WhatsApp conversations: messages, display name, phone number, voice notes and images, and booked appointments.
- Technical data: service logs, and cookies needed only to keep you signed in.
How we use it
- To provide the service: answering clients, booking appointments, sending reminders and alerting the clinic team.
- To protect accounts and prevent abuse.
- For support and to improve the service.
- We never sell your data, use it for advertising, or message your clients for our own purposes.
Artificial intelligence
To write replies and transcribe voice notes, we send the needed conversation text to our AI model provider (OpenAI) through its API; under its terms, this data is not used to train its models by default. AI can make mistakes, which is why the receptionist hands anything that needs a person to the team.
Who processes data with us
We rely on trusted providers who are bound to protect the data: hosting (Fly.io and Vercel), database (MongoDB Atlas), AI (OpenAI), email (Resend) and bot protection (Cloudflare). We run the WhatsApp connection server ourselves, and messages travel through WhatsApp itself like any normal chat.
Where data is stored
Data may be stored and processed on servers outside Saudi Arabia (in Europe and the United States), with appropriate safeguards as the law requires.
How long we keep it
We keep data for as long as the clinic subscribes. When a subscription ends we delete it within 90 days, except what the law requires us to keep; backups expire on their own schedule.
How we protect it
We use encrypted connections, secure sign-in sessions, role-based permissions so each member sees only what they should, and strict separation between clinics. No system is perfectly secure, but we keep working to protect your data.
Your rights
You can ask to access, correct or delete your data, or withdraw your consent, as the law allows. The clinic’s clients make their requests through the clinic, and we help the clinic fulfil them.
Updates
If we change this policy materially, we will ask you to approve the new version in the dashboard.
Contact
Questions or requests about your data: hello@tansiqai.com