Privacy Policy
Last updated: 25 September 2026
This policy explains how StackExpert (“we”) handles information in StackClinic. Hospitals, clinics and doctors (“organizations”) use StackClinic to manage their practice. They control the patient information they enter, and we process it on their behalf.
Information we handle
- Account information: names, email addresses, mobile numbers and roles of the people who use an organization’s account.
- Organization information: name, address, contact details, logo, plan and payment records (including uploaded payment receipts).
- Patient information entered by organizations: such as demographics, appointments, clinical notes, prescriptions, lab results, invoices and consents.
- Technical information: sign-in activity, IP addresses and audit logs, used for security.
How we use it
- To provide the Service, including messages the organization chooses to send (such as appointment reminders).
- To verify account owners, secure accounts and prevent misuse.
- To manage subscriptions, payments and referral benefits.
- To send service emails, such as verification, security alerts and billing notices.
We do not sell personal information and we do not use patient information for advertising.
Stack Intelligence
Scores and insights are calculated inside StackClinic with transparent rules and statistics on the organization’s own data. We do not send patient data to external AI services.
Sharing
We share information only with service providers we need to run the Service, and only for that purpose:
- Hosting and storage providers.
- SMS and email delivery providers, for messages sent through the Service.
- Bot-protection services on public forms.
We may also disclose information when required by law.
Security
- Each organization’s data is kept separate from every other organization’s, and this is enforced on our servers.
- Access within an organization is limited by role.
- Passwords and verification codes are stored in hashed form, and sensitive fields such as payout bank details are encrypted.
- Important actions are recorded in an audit log.
Retention
Records are kept while the organization’s account exists, including during any read-only period after a subscription lapses. When an account is closed, we delete or return the organization’s data on request, except where the law requires us to keep it.
Your choices
Patients should contact the hospital, clinic or doctor that holds their records to access or correct them. Account users can update their own details in the app or contact us.
Contact
StackExpert — [email protected] · WhatsApp +92 315 4441479