Patient data, handled properly
Your clinic owns its patients' data; Qaswa processes it on your behalf under Saudi Arabia's Personal Data Protection Law (PDPL). These are our commitments, plainly.
Welcome to Palm Smile Clinic. We use your details only to book your appointments and contact you. To stop messages at any time, reply STOP.
9:41 pmHi, how much is teeth whitening?
9:41 pmData stays in Saudi Arabia
The conversations, patient details and bookings we store are hosted in data centres inside the Kingdom, and so are the backups.
Messages themselves travel through Meta's WhatsApp Business Platform, as they do with every WhatsApp Business provider.
Clinic settings
- Data region
- Saudi Arabia
- Backups
- In the Kingdom
- Consent message
- On
- Medical questions
- Hand to staff
- Audit log
- On
Clear consent from the patient
In the first conversation the patient learns that your clinic handles their data for appointments and contact, and they can stop messages at any time.
We record the consent and when it was given, and Qaswa sends reminders and return-visit messages only to patients who agreed.
Consent log
- +966 5• ••• 4127
- Agreed · 9:41 pm
- +966 5• ••• 0388
- Agreed · 8:02 pm
- +966 5• ••• 7715
- Stopped messages · 6:15 pm
- +966 5• ••• 2290
- Agreed · 4:47 pm
- +966 5• ••• 9051
- Agreed · 1:20 pm
Never medical advice
Qaswa answers only from information you've approved: prices, times, location and instructions. It doesn't diagnose, suggest treatment or promise results.
Any medical question or complaint goes to a person with the full conversation.
I had a tooth out yesterday and there's swelling. Is that normal?
9:13 pmSorry to hear that. I'm passing your question to Dr. Noura now; she'll reply herself within minutes.
9:14 pmHanded to Dr. Noura · 9:14 pm
Access control and an audit log
Each staff member sees only what their role needs, and every action on patient data is logged with who and when.
We export or delete any patient's data on request, within the period the law sets.
Team access
- Dr. Noura
- Doctor · own schedule only
- Reem (front desk)
- All conversations
- Owner
- Reports and settings
- Last action
- Reem opened a chat · 9:16 pm
A data processing agreement
We sign a data processing agreement that makes your clinic the controller and Qaswa a processor acting on your instructions.
When you leave, we hand your data back and then delete it from our systems.
Data processing agreement
- Data controller
- Your clinic
- Data processor
- Qaswa AI
- Agreement
- Signed
- On cancellation
- Hand back, then delete
Questions clinics ask
What happens with medical questions?
Qaswa never diagnoses or gives medical advice. It answers only from information you've approved, like prices, times and location, and passes any medical question to a person with the full chat.
Do we keep our clinic's WhatsApp number?
Yes. We connect your existing number to the WhatsApp Business Platform, and your team can still see and answer every conversation.
Where is patient data stored?
Patient data we store is hosted in Saudi Arabia, in line with the Personal Data Protection Law (PDPL). The messages themselves travel through Meta's WhatsApp network, as with every WhatsApp Business provider.