Trust center
Privacy Policy
Effective June 28, 2026
This policy explains the information ClinicStock handles and the responsibilities that depend on your organization’s deployment.
Information ClinicStock handles
ClinicStock may process organization and account details, medicine and inventory records, suppliers, dispensing records, audit events, security events, and information you submit for support. The exact data stored depends on how your organization configures and uses the product.
Why information is used
Information is used to provide the inventory and dispensing service, authenticate users, enforce permissions, produce reports and alerts, maintain audit history, secure the service, and respond to support requests.
Patient and employee information
ClinicStock can contain sensitive clinic records. Organizations are responsible for deciding what information may be entered, establishing a lawful basis, assigning appropriate access, and meeting applicable notice, consent, retention, and deletion obligations.
Hosting and service providers
ClinicStock can be deployed in different environments. The organization responsible for a deployment determines its hosting region and infrastructure providers. Email delivery may use a configured SMTP service or Resend. Ask your deployment administrator for the providers that apply to your workspace.
Retention and deletion
Operational records are retained according to the organization’s configured practices and legal obligations. Some events may remain in audit history or backups for integrity and recovery. Workspace administrators should contact support when deletion or export cannot be completed in the product.
Data sharing
ClinicStock does not sell personal information. Information is disclosed only to operate the configured service, meet legal obligations, protect users and the service, or follow the documented instructions of the organization responsible for the workspace.
Your choices
Depending on your role and applicable law, you may request access, correction, export, restriction, or deletion. Requests concerning clinic records should normally be directed to the organization that controls the workspace.
Questions or requests
Contact [email protected]. For security and processing details, see the Security & Data page.