Privacy Policy

At TabeebHub, we are committed to protecting your privacy and personal data. This policy explains how we collect, use, store, and protect your information when you use our clinic management platform.

By using our services, you agree to the practices described in this policy. We encourage you to read it carefully and understand your rights.

TabeebHub is built for clinics. We process data relating to doctor accounts, clinic profiles and settings, staff accounts, and patient records entered or generated through the Platform.

We collect the following types of information:

Account Information

• Full name and email address
• Phone number
• Clinic name and address
• Medical license number (for doctors)

Medical Data

• Appointment records
• Digital prescriptions
• Patient medical history
• Visit notes

Usage Data

• Login records and IP addresses
• Browser and device type
• Platform usage patterns

• Provide and improve clinic management services.
• Process appointments and prescriptions.
• Send service-related notifications (appointment reminders, system updates).
• Process payments and invoices.
• Improve platform security and prevent fraud.
• Analyze usage patterns to enhance user experience.
• Comply with legal and regulatory requirements.

We employ advanced security measures to protect your data:

• Data encryption in transit (TLS 1.3) and at rest (AES-256).
• Hosted on secure cloud servers with daily backups.
• Multi-level permission system ensuring each user only accesses authorized data.
• 24/7 security monitoring and threat detection.
• Regular security audits and penetration testing.

We may use trusted third-party services to help operate our platform:

• Payment Processing: We use a certified payment gateway provider (including Paymob / Accept) to process online payments. We do not store full payment card data on TabeebHub servers.
• Messaging (WhatsApp): We use the WhatsApp Business Platform, operated by Meta Platforms, to send the login codes you request and — only when you agree — appointment reminders and booking and consultation updates on behalf of your clinic. For each message we share your phone number and the details that message needs (for example the clinic's name and the appointment time) with Meta. You can reply STOP at any time to stop these messages; login codes you ask for yourself are still sent.
• Google Calendar: only for doctors who choose to connect it, we copy their appointments into calendars TabeebHub creates in their own Google account. See “Google User Data” below.
• Cloud Hosting: Your data is hosted on cloud servers compliant with international security standards.
• Analytics: We use anonymized analytics tools to understand how the platform is used.

Google user data. If you are a doctor and choose to connect Google Calendar, TabeebHub asks Google for permission to create its own calendars in your Google account and to manage only the events in those calendars (calendar.app.created), plus your Google account's email address so we can show which account is connected. We never read, change or delete your other calendars or events.

What we put in your calendar. For appointments assigned to you (and, if you choose, appointments you assist or that are unassigned at a clinic you own), we create an event with the time, the clinic's address or “online consultation”, a link back to TabeebHub, and a title. By default the title includes the patient's name as the clinic recorded it, the visit type and the clinic's name. The clinic owner can limit this to the visit type and patient number, or to “Appointment” only, and you can choose less for yourself. Phone numbers, visit reasons, diagnoses, services, amounts and video links are never sent to Google. Anyone you share that calendar with, your Google Workspace administrator, and Google services you use may be able to see what appears in it.

How we store and protect it. Your Google sign-in token is encrypted at rest and used only by our servers to keep these calendars up to date. We do not show it to anyone, including you.

Removal. If you disconnect, lose access to a clinic, or the clinic owner turns calendar sync off, we delete the affected TabeebHub calendars from your Google account. If your Google connection is not working at that moment, we delete them as soon as it works again.

No other use. We use Google user data only to provide this feature. We do not sell it, use it for advertising, let people read it except where you ask us for support or the law requires it, or use it to train artificial intelligence or machine-learning models.

TabeebHub's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The use of information received from Google Workspace scopes will adhere to the Google User Data Policy, including the Limited Use requirements.

Subscription and related billing payments are processed through an electronic payment gateway operated by a certified third-party provider. TabeebHub does not store full card numbers, CVV, or card authentication data on our own infrastructure; processing follows the provider's secure flows and PCI DSS-aligned practices appropriate to our role as a platform that directs you to a hosted checkout.

You must complete payments only through the official in-app or on-site checkout. Prices are shown clearly before you proceed, and where applicable you must accept these Terms, our Privacy Policy, and our Refund & Cancellation Policy before continuing to the payment gateway.

After a successful transaction, we may send you an electronic receipt describing the transaction and payment method in line with our notification settings and your registered contact details.

We process personal data in accordance with applicable laws in the Arab Republic of Egypt, including the Personal Data Protection Law No. 151 of 2020 (PDPL), where relevant to our processing activities. For payment activities, we also follow applicable Central Bank of Egypt requirements and card-scheme rules as implemented through our payment partner.

Payment services must be used only for the agreed business purpose (clinic management SaaS subscriptions and related billing). You must not use the Platform for unlawful purposes, activities that violate public morals, or unrelated commercial activity.

We do not sell personal or patient data to third parties or use it for third-party marketing. Access within a clinic is limited to authorized users according to role-based permissions.

If we become aware of a security incident that materially affects personal data processed on the Platform, we will take reasonable steps to contain and investigate it and will notify affected users where required by law.

When an incident relates to payment security or our obligations toward the gateway provider, we will inform the payment processor without undue delay in line with applicable contractual requirements.

We use cookies to improve your experience on the platform:

• Essential Cookies: Required for platform operation (login, language preferences).
• Analytics Cookies: Help us understand how the platform is used to improve it.

You can control cookie settings through your browser. Disabling some cookies may affect platform functionality.

You have the following rights regarding your personal data:

• Right to Access: Request a copy of your personal data.
• Right to Rectification: Correct any inaccurate data.
• Right to Erasure: Request deletion of your personal data.
• Right to Portability: Export your data in a machine-readable format.
• Right to Object: Object to processing of your data for certain purposes.

To exercise any of these rights, please contact us at the email address listed below.

We retain your data as long as your account is active or as needed to provide our services. When you cancel your account:

• Data is retained for 90 days to allow you to export your data.
• After 90 days, all personal data is permanently deleted.
• We may retain anonymized data for statistical analysis purposes.

Billing, settlement, and accounting records related to payments (including metadata processed through our payment partner) may be kept for longer periods where required for regulatory compliance, tax, audit, or disputes under applicable Egyptian law and our agreements with payment providers.

TabeebHub is not directed at children under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected data from a child without parental consent, we will take steps to delete that information immediately. Minor patient data is managed exclusively by their treating doctors and guardians.

We may update this Privacy Policy from time to time. We will notify you of any material changes via email or through a prominent notice on the Platform. We encourage you to review this policy periodically. You can also review our Terms of Service for additional information.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at support@tabeeb-hub.com.