Privacy Policy

Last updated: September 16, 2026

This Privacy Policy explains how Omnisfy ("Omnisfy", "we"), the developer of BotMed, collects, uses, shares and protects personal data — both from visitors of this institutional website and from patients who interact with BotMed over WhatsApp on behalf of a client clinic — in compliance with applicable data protection laws (including Brazil's LGPD) and with the WhatsApp Business Platform policies operated by Meta.

1. Who is the data controller

Omnisfy is the controller of personal data processed through this website and BotMed's technical infrastructure. The clinic that uses BotMed is generally the controller of its own patients' data; Omnisfy acts as a processor, handling that data only to provide the service contracted by the clinic. Questions can be sent to [email protected].

2. Scope of this policy

• Institutional website (omnisfy.com): visitors who fill out the contact/demo request form.
• BotMed product: patients who exchange WhatsApp messages with a clinic that uses BotMed.

3. What data we collect

a) On the institutional website, we only collect what you provide in the contact form: name, email, clinic/company name (optional), and your message. We do not use tracking cookies, advertising pixels, or third-party analytics tools — only standard server logs (IP, timestamp), used solely for security.

b) When using BotMed over WhatsApp, we collect the data needed to operate care and scheduling, such as:

• Name and WhatsApp phone number;
• Content of messages exchanged with the AI agent;
• Appointment data (specialty, date and time of the visit);
• Information voluntarily provided during initial intake (e.g., reason for visit), when that feature is enabled by the clinic.

We do not collect sensitive health data beyond what is strictly necessary to schedule or route the visit, and we do not use this data for any purpose beyond providing the service contracted by the clinic.

4. How we use the data

• Respond to patient messages and questions on behalf of the clinic;
• Schedule, confirm, remind, and reschedule appointments;
• Generate responses using AI models, based on the conversation itself;
• Reply to business inquiries received through the institutional website;
• Comply with applicable legal or regulatory obligations.

We do not use collected data to send unsolicited marketing, and we do not sell it to third parties.

5. Who we share data with

• Meta / WhatsApp Business Platform: messages travel through WhatsApp Business infrastructure to reach BotMed and return to the patient, also subject to Meta's own privacy policies;
• AI infrastructure providers: process message content to generate the agent's responses;
• The clinic's practice management system / EMR: when integrated, to check and confirm calendar availability;
• Hosting and email providers necessary to operate the website and the service;
• When required by law, court order, or a competent authority.

We do not share your data with third parties for advertising purposes.

6. Legal basis

Website data is processed based on your consent when submitting the form. Patient data via BotMed is processed based on the performance of the healthcare service contract between the patient and the clinic, and on the legitimate interest in continuity of care.

7. Data retention

We keep data for as long as necessary to provide the contracted service and comply with applicable legal obligations (including medical record retention periods, where relevant to the controlling clinic), after which it is deleted or anonymized.

8. Security

We adopt reasonable technical and organizational measures — such as access control and encryption in transit — to protect data under our responsibility against unauthorized access, loss, or misuse.

9. Your rights and how to request deletion of your data

Depending on your jurisdiction, you may have the right to: confirm whether we process your data, access it, correct incomplete or outdated data, request anonymization or deletion of unnecessary data, request portability, be informed about sharing with third parties, and withdraw consent at any time.

To request deletion of your data, email [email protected] with your name and the WhatsApp number used (if applicable), or ask directly at the clinic where you are a patient — we will act on the request within a reasonable time, subject to legal data-retention obligations.

10. Children's data

BotMed is not intended to independently collect data from children; when care involves a minor, processing is carried out under the responsibility of the legal guardian and the controlling clinic, in accordance with applicable law.

11. Changes to this policy

We may update this policy periodically to reflect changes in our practices or legal requirements. The last-updated date is always shown at the top of this page.

12. Contact

For any question about this Privacy Policy or the processing of your personal data, write to [email protected].