Privacy

For now, this page gathers the consent information we ask for before sending the report, and how we handle button clicks and public data about other clinics. The full policy is being drafted.

Updated on 2026-10-07.

DRAFT: to be validated by a lawyer before going live.

Consent text

• Data controller: [legal name and company ID to be defined], responsible for Clinnu.
• Purpose: to send the Check-up report to your WhatsApp and to contact you commercially about Clinnu via WhatsApp.
• Clicks: we record clicks on buttons in the report and plans pages and link them to your sign-up, to measure interest in the plans and help the sales contact.
• Legal basis: your consent (LGPD, art. 7, I).
• Retention: we keep your data and these records for 12 months from your consent, or until you ask us to delete them.
• Your rights: access, correction, deletion, portability and withdrawal of consent at any time, by e-mail at [data protection contact e-mail to be defined].

Button clicks (plan interest test)

• What we store: when you click a button such as "See plans", "Book 20 min" or "I want (plan name)", we record the type of click, the plan (if any), which part of the page you clicked in, the page language, and the date and time.
• If you arrived through the link to your report, we link the click to your lead record. Without that link, the click is not linked to anyone.
• We do not store your IP. We only store an irreversible code computed from it (HMAC with a server-side secret key), used solely to limit abuse (at most 60 clicks per hour per IP). We use no cookies or browser storage for this record.
• Purpose: to measure which plans and buttons attract interest and, when the click comes from a lead's report, to let the sales team know which plan the clinic was interested in before getting in touch.
• Retention: these records are deleted automatically 12 months after they are created, or earlier if you ask for deletion. If your lead data is deleted, the clicks are no longer linked to you.
• Payment (founding clinic): if you choose to pay, you are taken to the Asaas payment page, which processes the payment and receives your payment details directly from you; Clinnu never sees or stores card data. We keep only the plan, amount, date and status of the payment, linked to your lead; these financial records may be kept for as long as tax law requires, without a link to your lead data once that is deleted.

Public data about competitor clinics

• To build the report, we query public business data from Google Places (name, rating, review count, phone, opening hours and website address) and read the public website of up to 5 nearby clinics of the same specialty, to check items such as HTTPS, WhatsApp link, online booking and Instagram. This is company data, not patient data.
• This data is displayed in the report and is not stored by us: the report is generated again on every visit. We only keep the Google identifier (place_id) of the lead's own clinic. Reviews are shown as Google returns them, with the required attribution.