Privacy policy
C-Link is an AI receptionist that answers a clinic's own WhatsApp number. This page describes what the software stores, what it encrypts, who else processes it, and how long it keeps it.
This document is not final. The technical sections describe the system as it is actually built and were checked against the source. The sections marked to be confirmed are legal determinations that have not yet been made. Do not rely on this page as a completed privacy policy until those are filled in and it has been reviewed.
Who is responsible
C-Link is a product of Enovail. A clinic using C-Link decides what patient data enters the system and why; Enovail operates the software on the clinic's behalf.
To be confirmed by legal: the registered legal entity and address of the data controller, the relationship between Enovail and each clinic in data-protection terms, the governing law and jurisdiction, and whether a data processing agreement is offered.
What C-Link stores
For each clinic, C-Link stores the operational record a receptionist would keep:
- the patient's name and WhatsApp number;
- the messages exchanged with the clinic, including photos and voice notes a patient sends;
- appointments, their history, and which doctor they are with;
- notes and images a doctor attaches to a patient file;
- payment amounts recorded against a patient, per doctor.
C-Link does not have fields for a date of birth, a national ID or a patient email address, and does not collect them.
What the AI receives
To answer a patient, the assistant is given the conversation and the context needed to be useful. That includes the patient's name, the doctor they usually see, their past visit dates and upcoming appointments, and the recent messages in the conversation. It is sent to the AI provider named below in order to produce a reply.
The patient's phone number as stored in the clinic's records is not sent to the AI provider.
Where a clinic enables note polishing, the text of a doctor's note is also sent to the AI provider to be rewritten.
Encryption and isolation
Clinics are isolated at the database level. Every table holding clinic data has row-level security enabled and enforced, the application connects with a role that cannot bypass it, and the current clinic is set per transaction. A query that does not identify a clinic returns nothing rather than everything.
Encrypted at rest with AES-256: message contents, media captions, the text of doctor's notes, and stored phone numbers.
Not encrypted at rest: the patient's name and the clinic's address are stored as ordinary text. There is no whole-database encryption beyond what the hosting provider applies to its own storage.
To be confirmed by legal: whether the hosting provider's own disk encryption should be described here, and what, if anything, this page should say about transport security between the application and its database.
How long things are kept
Photos and voice notes sent over WhatsApp are deleted seven days after the conversation they belong to is closed.
Message text, patient records and appointment history are kept for as long as the clinic's account is active. There is currently no automatic deletion of message text.
To be confirmed by legal: statutory retention periods for medical records in each market served, what happens to a clinic's data after the account closes, and whether a clinic can request deletion earlier.
Who else processes the data
C-Link relies on the following services. Each receives only what it needs to do its part.
| Service | What it receives |
|---|---|
| Meta (WhatsApp Business Platform) | Messages to and from patients, and the phone numbers involved. |
| The AI provider | The conversation and the context described above, to produce a reply. |
| Database and file hosting | All stored clinic data, in the region named by the provider. |
| Application hosting | Requests made to the application. |
| Email delivery | Account emails, including a temporary password when an account is created. |
| Google Calendar (only if a doctor connects it) | The appointment, with the patient's name in the event title and their phone number in the description. |
| Browser push (only if enabled) | The notification text, which can include a patient's name and message. |
C-Link runs no analytics and no advertising or tracking scripts, and there is no payment processor in the product.
To be confirmed by legal: the named legal entity, jurisdiction and transfer mechanism for each provider above, and whether sub-processor changes require notice.
This website
This marketing site sets no analytics or advertising cookies. It stores one preference in your browser — your light or dark theme choice — which never leaves your device. Web fonts are loaded from a third-party font service, which receives your IP address as part of that request.
If you use the assistant on this page, what you type is sent to our server and to the AI provider in order to answer you.
Your rights
If you are a patient, the clinic you messaged holds your record; contact the clinic first. If you cannot reach them, write to us and we will route the request.
To be confirmed by legal: which statutory rights apply in each market, the procedure and response window for access, correction, deletion and objection requests, the lawful basis relied on for each purpose, and the supervisory authority to complain to.
Contact
Questions about this page or about your data: admin@enovail.com