Privacy Policy

1. Who is responsible for your data

This policy explains how SANORIA CARE LTDA (tax ID 69.430.101/0001-07, "Sanoria") processes personal data under Brazil’s General Data Protection Law (LGPD, Law 13,709/2018). Questions and requests about personal data: privacidade@sanoria.care.

Our role depends on the data:

• Patient and medical record data: the CLINIC is the controller and Sanoria is the processor. We process it only to provide the service, under the clinic’s instructions. To access, correct or delete this data, contact the clinic that treats you.
• Data of people who use the system (owners, professionals, staff) and of the subscription: Sanoria is the controller.

2. What data we process

• Account and team: name, email, password (stored irreversibly), role in the clinic, professional details (board, number, specialty) and, when provided, tax ID and date of birth.
• Clinic: legal name, tax ID, addresses, units, rooms, hours and settings.
• Patients (entered by the clinic): name, ID document, contact details, date of birth, insurance, appointments, payments and medical records, which are SENSITIVE health data.
• Usage and security: access logs, IP address, time of actions, device and browser, for security, auditing and bug fixing.
• Billing: plan, cycle and subscription status. Card data is processed directly by Stripe and never passes through our servers.

3. What we use it for (and the legal basis)

We do not sell personal data and do not use it for advertising.

• Providing the contracted service (scheduling, records, documents, finance): performance of a contract and, for health data, health protection and the regular exercise of rights, according to the clinic’s activity.
• Security, fraud prevention and auditing: legitimate interest and legal obligation.
• Billing and tax compliance: performance of a contract and legal obligation.
• Service emails (activation, password reset, invitations): performance of a contract.
• Improving the product with aggregated data that does not identify people: legitimate interest.

4. Who we share it with

We use providers to run the service. They receive only what is necessary and act on our instructions:

• Amazon Web Services (AWS): hosting, database, transactional email and storage.
• Stripe: card payment and subscription processing.
• Meta (WhatsApp Business): only if the clinic connects a number, to send reminders and receive confirmations. The account and number belong to the clinic.
• Google (Calendar) and Memed (digital prescriptions): only if the professional or clinic turns the integration on.
• Meta (Pixel) and Google (Analytics): measuring visits and sign-ups, only if you accept the cookie notice (section 9).
• Authorities, when legally ordered or to defend rights in proceedings.

5. International transfers

Some providers keep servers outside Brazil. In those cases the transfer takes place with the safeguards the LGPD requires, such as contractual clauses and equivalent security measures.

6. How we protect it

No system is completely immune. If an incident that may cause significant risk occurs, we will notify those affected and the ANPD as the law requires. For clinics in the United States, we also notify the clinic within the time frames of the HIPAA Business Associate Agreement (BAA), published at sanoria.care/baa.

• Encrypted communication (HTTPS) and hashed passwords.
• Personal documents (tax ID, company ID and passport numbers) encrypted in the database with AES-256-GCM, using a dedicated key; integration secrets (such as the WhatsApp token) and two-step verification secrets are also encrypted.
• Database with encryption at rest and automatic backups.
• Separation by clinic: each organization can only access its own data.
• Optional two-step verification, role-based access control and an audit trail of sensitive actions.

7. How long we keep it

We keep data while the account is active. Medical records follow the minimum retention periods of the law and professional boards, which are set by and the responsibility of the clinic. After closure we delete or anonymize data, except what the law requires us to keep (for example tax and access records).

8. Your rights

You may ask for confirmation of processing, access, correction, anonymization, portability, information on sharing, deletion of data processed with consent and withdrawal of consent (LGPD, art. 18). For patient data, contact the clinic; for anything else, write to privacidade@sanoria.care. You may also complain to the ANPD.

9. Cookies and local storage

We use the browser storage needed to keep you signed in and remember preferences such as language.

On the website (sanoria.care) and on the app’s sign-up screen, and only if you accept the cookie notice, we use the Meta Pixel and Google Analytics to learn how many people visit, where they came from and how many complete sign-up. These events carry no email, document or patient data, and none of this runs on the app’s screens after login. You can decline in the notice; your choice is stored in the sanoria_consent cookie for 180 days.

10. Children and teenagers

Sanoria is for professionals and clinics. Data of minors may be entered by the clinic as patients, always with the guardian, under the clinic’s responsibility.

11. Changes to this policy

We may update this policy. Material changes will be emailed to each User’s registered address at least 15 (fifteen) days before they take effect, stating what changed, and the new version will be available on this page with its update date. Changes required by law or by an authority may take effect sooner when so required.