Privacy Policy

1. Who processes what

VIP-Insight is the processor of the data registered in Routine — we process the data on behalf of the professional/clinic that contracted the platform. That professional/clinic is the controller of their own patients'/clients' data: they decide what data to collect and why, and they're accountable to the patient for it.

2. Data we collect

From your account: name, email, business type, contact phone number.

From your patients/clients (entered by you): name, contact, appointments, and — when applicable to your type of business — medical records/history. Medical records are sensitive data under Brazil's LGPD (Law 13,709/2018, art. 11): it requires a specific legal basis and extra care, handled here with access restricted to your own account.

3. Why we process this data

To provide the contracted service (contract performance): scheduling, registration, and records are the platform's core functionality. We don't sell or share patient/client data with third parties for advertising purposes.

4. Retention and deletion

When a client account is deleted, it's locked and recoverable for up to 6 months, after which it's permanently erased (see the mechanism in the admin panel). Patients can request correction or deletion of their own data directly from the professional/clinic that serves them (their data controller).

5. Security

Data is isolated per account through row-level access control in the database (RLS) — each professional/clinic only sees their own records. The connection to the platform is encrypted (HTTPS).

6. Your rights

Regarding your own account's data, you can request access, correction, or deletion at any time through the channel below. Regarding patient/client data, the request must be directed to the controller (the professional/clinic that serves them) — pass it along to them if you're the subject of a patient record.

7. Contact

Questions or requests about personal data: contato@vip-insight.com.br.