Your data, handled with care and clear boundaries.

This Privacy Policy explains how CureSuite handles personal data when you visit our website, request a demo, create a clinic account, subscribe to the service, or contact us.

For clinic account, billing, sales, and website data, CureSuite determines how the data is used. For patient and clinical data entered by a clinic, the clinic is responsible for deciding why and how that data is processed, while CureSuite processes it to provide the contracted service.

The information we collect depends on how you use CureSuite.

• Account and contact details, including name, work email, phone number, clinic name, specialty, country, and timezone.
• Subscription and transaction records, such as selected plan, billing cycle, payment status, and payment-provider references.
• Clinic content submitted through the service, including operational, staff, appointment, patient, and medical-record information controlled by the clinic.
• Technical and usage data, including device, browser, IP address, pages visited, timestamps, and diagnostic logs.
• Messages and files you send to sales, support, or customer-success teams.

We use personal data only for legitimate business and service purposes, including to:

• Create and secure accounts, provision clinic workspaces, and deliver requested features.
• Process subscriptions, confirm payments, send service messages, and provide support.
• Maintain reliability, prevent fraud and misuse, troubleshoot errors, and improve the service.
• Respond to enquiries, arrange demos, and send marketing communications where permitted. You may opt out of marketing at any time.
• Meet legal, regulatory, accounting, and security obligations and protect our rights and users.

CureSuite uses vetted providers for services such as payment processing, hosting, analytics, communications, and support. They may process only the information needed to perform their services and are expected to protect it appropriately.

Payment details are entered on the secure checkout operated by Fawaterk. CureSuite receives payment status, transaction references, and tokenized billing information where required for recurring subscriptions; we do not ask you to send full card details by email or support chat.

We retain information for as long as needed to provide the service, maintain required business records, resolve disputes, enforce agreements, and meet legal obligations. Retention periods vary by data type and account status.

We use administrative, technical, and organizational safeguards designed to protect information. No online system can be guaranteed completely secure, so account owners should use strong credentials, limit staff access, and notify us promptly of suspected misuse.

Depending on applicable law, you may request access, correction, deletion, restriction, objection, or a copy of personal data about you. You may also withdraw consent where processing relies on consent.

Clinic users should first contact their clinic regarding patient or employee records controlled by that clinic. CureSuite will support the clinic in responding where required. We may verify identity before completing a request and may retain information where legally permitted or required.

Service providers may process data in countries other than your own. Where required, we use appropriate contractual and organizational measures for such processing.

We may update this policy as the service or legal requirements change. The revised policy will be posted here with a new effective date, and material changes may also be communicated through the service or by email.