Privacy Policy

Who we are

CRPTON is a clinic management platform operated by Crpton Technologies, a company based in Palestine. For visitors of this website and for clinic accounts on the platform, CRPTON acts as the data controller. For the customer and patient information that clinics enter into the platform, the clinic is the data controller and CRPTON processes that data on the clinic's behalf and instructions.

For any privacy request, contact us at info@crpton.com.

What data we collect

We collect the following categories of data:

• Business account information — your name, work email, phone number, clinic name and profile details, and login credentials when you create a CRPTON account.
• Customer and patient information — details your clinic enters into the platform, such as names, contact details, appointments and visit notes. This data belongs to your clinic; we process it only to provide the service.
• Messages, attachments and logs — the content and delivery status of messages sent through the platform (including WhatsApp and SMS reminders), files you upload, and technical logs.
• Device and usage data — IP address, browser type, operating system, pages visited, and cookies.
• Integration data — identifiers and access tokens needed to connect services you choose to link, such as Google (for example, calendar) or the WhatsApp Business Platform.
• Website enquiries — the details you submit through our contact and demo request forms (name, email, phone number, clinic name).

Why we collect it

We collect and use data to:

• Authenticate you and keep your account secure.
• Provide, operate and maintain the platform and this website.
• Send the appointment reminders and service notifications your clinic configures.
• Respond to enquiries and provide customer support.
• Prevent fraud, abuse and security incidents.
• Understand usage and improve our features and performance.
• Comply with legal obligations.

How we use WhatsApp data

When your clinic enables WhatsApp messaging, we use WhatsApp message data only to provide the messaging service your clinic requests — such as appointment reminders, confirmations and follow-ups — to customers who have agreed to be contacted this way.

We send WhatsApp messages through the WhatsApp Business Platform and comply with Meta's Business Messaging Policy. We do not use WhatsApp data for advertising, and we never sell it.

Message content and delivery metadata are stored securely for as long as needed to provide the service and support your clinic, and are deleted according to the retention periods described below.

Who we share data with

We never sell your personal data. We share data only with the service providers we need to run CRPTON, and only to the extent necessary:

• Cloud hosting and storage providers (e.g. DigitalOcean, hosted in the European Union).
• Email delivery providers (e.g. Resend) for transactional emails and enquiry responses.
• Messaging providers for SMS and WhatsApp delivery (e.g. Meta Platforms and telecom gateways).
• Payment processors for subscription billing (they handle your card details; we do not store them).
• Product tools embedded in our site and app, such as the in-product announcements widget (Releaseo).

We may also disclose data when required by law or to protect the rights and safety of our users.

Data retention

We keep your data for as long as your account is active or your enquiry is open.

When you close your account, or when we receive a verified deletion request, we delete or anonymize the related personal data within 30 days. Residual copies in encrypted backups are purged within 90 days.

Website enquiries are kept only as long as needed to handle your request.

Your rights

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to fix inaccurate or incomplete data.
• Deletion — ask us to delete your personal data.
• Export — receive your data in a portable, machine-readable format.

To exercise any of these rights, email us at info@crpton.com and we will respond within 30 days. If you are a patient or customer of a clinic that uses CRPTON, please contact your clinic first — it controls your records, and we will assist it in fulfilling your request.

Security

We protect your data with:

• Encryption in transit (TLS/HTTPS) and at rest.
• Role-based access controls, so staff and clinic users only see what they need.
• Regular encrypted backups.
• Monitoring and logging to detect and respond to suspicious activity.

If a security incident affects your personal data, we will notify affected customers without undue delay.

Cookies

This website uses only essential cookies:

• A language preference cookie that remembers whether you browse in English or Arabic.
• A session cookie that keeps you signed in to authenticated areas of the platform.
• Local data used by our in-product announcements widget to remember what you have already seen.

We do not use advertising or cross-site tracking cookies.

Children's privacy

CRPTON is a business service and is not directed at children. We do not knowingly collect personal data directly from children under 16.

Clinics may record patient information about minors as part of providing care; they do so as data controllers, under their own legal and professional obligations, including obtaining any required guardian consent.

International transfers

Our platform data is hosted in the European Union (Frankfurt, Germany). Some of our providers may process data in other countries; whenever data crosses borders, we require safeguards that are at least as protective as this policy.

Policy updates

We may update this policy from time to time. The "Last updated" date at the top shows the current version. If we make material changes, we will notify you on this website or by email before they take effect.

Contact us

Crpton Technologies (CRPTON) — Palestine. This policy is governed by the laws of Palestine.

Address: Alrebat Building, 4th Floor, Hebron St., Bethlehem, Palestine 11123

Email: info@crpton.com

Phone: +972 59 799 0320

Phone: +972 56 640 0580