Privacy Policy

Last updated: 1 May 2026

1. Introduction

Medentura ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website, and services (collectively, the "Services").

We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and other applicable data protection laws in the jurisdictions where we operate.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, phone number, clinic name, and business registration details when you sign up.
  • Payment Information: Billing details processed through our third-party payment providers (Stripe, FPX, GrabPay). We do not store full credit card numbers.
  • Communications: Messages you send through our platform, including WhatsApp conversations managed via our AI system.

2.2 Information Collected Automatically

  • Usage Data: Pages visited, features used, time spent on the platform, and interaction patterns.
  • Device Information: Browser type, operating system, IP address, and device identifiers.
  • Cookies: We use essential and analytics cookies to improve your experience.

2.3 Patient Data (Processed on Behalf of Clinics)

When clinics use our CRM and WhatsApp AI features, we process patient data on behalf of the clinic (as a data processor). This may include patient names, contact details, treatment history, and appointment records. The clinic remains the data controller for this information.

3. How We Use Your Information

  • To provide, maintain, and improve our Services
  • To process transactions and send related information
  • To operate our AI-powered WhatsApp communication features
  • To send administrative notifications, updates, and marketing communications (with your consent)
  • To analyze usage patterns and optimize platform performance
  • To comply with legal obligations and enforce our terms

4. Data Sharing & Disclosure

We do not sell your personal data. We may share information with:

  • Service Providers: Third-party vendors who assist in operating our platform (hosting, payment processing, analytics).
  • Meta/WhatsApp: As required to operate WhatsApp Business API integrations.
  • Legal Requirements: When required by law, regulation, or legal process.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets.

5. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, access controls, and regular security audits. Our infrastructure is deployed on edge networks with data residency in Southeast Asia.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide Services. Upon account termination, we will delete or anonymize your data within 90 days, unless retention is required by law.

7. Your Rights (Under PDPA)

You have the right to:

  • Access your personal data held by us
  • Correct inaccurate or incomplete data
  • Withdraw consent for data processing
  • Request deletion of your data (subject to legal obligations)
  • Be informed about how your data is being processed

To exercise these rights, contact us at privacy@medentura.com.

8. Cookies

We use cookies and similar technologies for essential functionality, analytics, and performance optimization. You can manage cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality.

9. International Data Transfers

Your data may be processed in servers located in Southeast Asia. We ensure appropriate safeguards are in place for any cross-border data transfers in compliance with applicable laws.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the platform. Continued use of our Services after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: