Redvein

Effective Date: September 13, 2026 (Updated: October 2026)

Privacy Policy

1. Legal Ownership & Roles

RedVain (redvain.com) is owned and operated by FINISPAN (مؤسسة ذات الشخص الوحيد و ذات المسؤولية المحدودة فينسيان). All services, data processing, and system operations under the RedVain platform are conducted under the legal authority of FINISPAN.

  • Clinic / Doctor (Data Controller): The clinic or medical practitioner remains the primary legal controller of all patient records and schedule data.
  • RedVain (Data Processor): RedVain acts solely as a technical data processor on behalf of the clinic to manage automated appointment scheduling workflows.

2. Information We Collect

  • Clinic & Doctor Data: Full name, professional email address, phone number, clinic details, subscription status, and encrypted account authentication credentials.
  • Patient Data: Full name, WhatsApp phone number, Date of Birth (DOB), requested appointment date/time, and consultation category (Case Type).
  • Website Operational Logs: Standard website access logs (IP address and browser metadata) collected strictly for security, traffic analysis, and performance monitoring.

3. Purpose of Processing & AI Disclaimer

Data collected is processed strictly to provide automated appointment scheduling, manage clinic queue displays, and deliver automated notifications via the WhatsApp Business API.

  • AI Processing Disclaimer: Artificial Intelligence (Anthropic Claude API) is utilized strictly for parsing administrative booking messages and scheduling intents. The AI does not store conversations for model training, nor does it perform medical diagnosis, triage, or clinical advice.

4. Third-Party Data Processors

To provide our SaaS platform, RedVain shares minimum required data with trusted technical partners under strict security protocols:

  • Lemon Squeezy (Merchant of Record): Handles subscription billing, payment processing, tax compliance, and fraud detection.
  • Meta (WhatsApp Business API): Delivers booking notifications and messages between patients and the clinic.
  • Anthropic (Claude API): Processes natural language booking inputs for scheduling automation.
  • Supabase (Cloud Infrastructure): Secure, encrypted database hosting for operational data.
  • Automation Infrastructure (n8n): Handles secure internal data routing and webhook orchestrations.

5. Data Security, Retention & Right to Erasure (Anonymization)

  • Security Standards: Data is secured using standard encryption protocols in transit and at rest as implemented across our cloud infrastructure (Supabase, SSL/TLS endpoints). FINISPAN does not sell, lease, or trade personal or medical data to any third party.
  • Patient Data Erasure: Patients can request the deletion/anonymization of their personal identifiable information (PII) at any time via WhatsApp or through their clinic. Upon request, personal fields (Name, Phone Number, Date of Birth) are permanently anonymized/set to NULL across related database tables, while non-identifiable scheduling slots are retained solely for clinic operational stats.
  • Doctor Data Erasure: Doctors can request complete account and clinic data deletion by contacting us directly.

6. Contact Information

For privacy inquiries or data rights requests, please contact FINISPAN at: