Quro Privacy Policy

1. Overview

Quro is a clinic management platform operated by ESMNT. This policy explains how we collect, use, share and protect information when you use the Quro platform and this website, including our WhatsApp Business integration powered by Meta's Cloud API.

By using Quro or this website you agree to the practices described here. If you do not agree, please stop using them.

2. Information we collect on this website

When you book a walkthrough, request a call or use the Revenue Leak Check, we collect what you give us: your name, mobile number, whether it is on WhatsApp, clinic name, role, city, number of doctors and branches, your answers to the check, the problem you want to solve and, if you give it, your email address.

We also record how you reached us: the advertising campaign parameters in the link (UTM tags and click identifiers such as fbclid or gclid), the page you first landed on, the button you clicked, your device type and the referring site. We keep these in a first-party cookie and in your browser's local storage for 30 days.

3. Information we collect in the platform

• Clinic and staff data: account credentials (name, email, role), clinic name, address and settings, and activity logs.
• Patient data entered by clinic staff: identifiers, contact details, medical records, visit notes, diagnoses, treatment plans, billing and insurance information. Patient data is Protected Health Information and is handled under the applicable healthcare privacy rules.
• WhatsApp, Instagram and Messenger data: phone numbers and profiles of people who message the clinic, message content and delivery status provided by Meta, and the clinic's business account credentials.
• Technical data: browser type, operating system, IP address, session tokens, error logs and performance metrics.

4. How we use information

We do not sell or rent personal data.

• To provide and operate Quro, and to let clinics talk to patients on WhatsApp, Instagram and Messenger.
• To contact you about the walkthrough you booked or the call you requested, on WhatsApp, by phone and by email, when you have agreed to it.
• To send appointment confirmations and reminders.
• To measure which of our adverts lead to booked calls. We send Meta and Google hashed identifiers only (for example a hashed phone number), never your number in plain text.
• To keep accounts secure, diagnose problems and meet legal obligations.

5. Who we share it with

Each provider processes data on our behalf under its own terms and privacy policy.

• Supabase: database hosting and authentication.
• Meta Platforms: WhatsApp message delivery, and advertising measurement through the Meta Pixel and Conversions API.
• Google: website analytics (Google Analytics 4) and, if we run search ads, advertising measurement.
• Our calendar and video meeting provider, to schedule and hold your walkthrough.

6. Cookies and similar technologies

This website uses a first-party cookie and local storage to remember how you reached us and to save your answers if you are interrupted. If advertising measurement is switched on, the Meta Pixel and Google Analytics set their own cookies. You can block or delete cookies in your browser settings.

7. How long we keep it

We keep walkthrough and lead records for as long as we are in conversation with your clinic and for up to 24 months afterwards, unless you ask us to delete them sooner. Clinic data is kept while the clinic account is active and for a reasonable period after, to meet legal obligations. Patient records follow the retention rules of the clinic's jurisdiction. Clinic administrators can delete message history at any time.

8. Security

We use encryption in transit and at rest, role-based access, audit logging and encrypted storage of API credentials. No method of transmission over the internet is completely secure, but we follow good practice to protect your data.

9. Your rights

To use any of these rights, or to stop marketing messages, write to hello@esmnt.com or reply STOP on WhatsApp.

• Access the personal data we hold about you
• Correct inaccurate data
• Ask us to delete your data
• Object to or restrict some processing, including marketing messages
• Receive your data in a portable format

10. Children

Quro is for healthcare professionals and clinic staff. We do not knowingly collect information from people under 18, except as part of patient records managed by a clinic.

11. Changes and contact

We may update this policy and will change the date above when we do. Questions: hello@esmnt.com. ESMNT, Amman, Jordan.