How We Protect Your Data
Your privacy is our responsibility. Here is exactly what we do.
Data Protection Standards
Your personal data is processed in compliance with the Turkish Personal Data Protection Law (KVKK) and the EU General Data Protection Regulation (GDPR).
We act as a data processor on behalf of your clinic. Your clinic is the data controller and determines how your data is used.
What We Do
All patient photos and documents are stored with encryption and access control
Only authorized clinic staff can view your records
WhatsApp messages are protected by end-to-end encryption
Your data is never sold or shared with third parties for marketing
We do not use your data to train AI models
Patient data is retained only as long as legally required, then permanently deleted
Contact forms only accept requests from approved clinic websites
Regular security audits are conducted to maintain standards
Your Rights
Access your data
See what information we hold about you
Correct inaccurate data
Fix anything that is wrong
Request deletion
Ask us to delete your data (subject to legal retention requirements)
Withdraw consent
Stop processing at any time
File a complaint
Contact your clinic or the relevant data protection authority
To exercise these rights, contact your clinic directly or email privacy@aurenza.com
Security Measures
Encrypted file storage with access control
Secure WhatsApp Business API for all patient communication
Regular security audits and automated monitoring
Staff training on data protection
Incident response protocol with 72-hour notification commitment
Sub-Processors
We work with these trusted providers to deliver our service:
Base44
Data storage, application hosting
Vercel
Website hosting
Meta / WhatsApp
Patient messaging
Google Workspace
Email, documents
All providers have signed Standard Contractual Clauses for cross-border data transfer.