This page is a reasonable starting template, not a substitute for legal advice. Have qualified counsel review and adapt it for your market before relying on it in a real launch.
Privacy Policy
Last updated: August 2026. This is a template, not a dated legal document.
MediMate ("we", "us", or "our") is committed to protecting privacy for pharmacy staff, customers, and website visitors. This Privacy Policy explains how we collect, use, and protect information when pharmacies use the MediMate platform and when visitors use this marketing website.
This page is a reasonable starting template for launch readiness. Have qualified counsel review and adapt it for your market before relying on it in production.
What information do we collect?
When a pharmacy uses MediMate, we process the information needed to operate the service: staff account details, catalog and inventory data, customer WhatsApp messages and phone numbers, prescription images and information extracted from them, orders, and invoices.
When a visitor submits the demo-request form on this website, we collect the contact and business details they provide.
How we use information
Customer and prescription data is used only to operate the pharmacy's WhatsApp commerce workflow — matching requests to stock, routing prescriptions to a pharmacist for review, generating invoices, and giving the pharmacy's own staff visibility into their conversations and orders. Demo-request details are used to follow up about a demonstration or trial, and are never sold to third parties.
Website analytics
This marketing site records first-party usage signals so we can understand which pages and sections are useful: page views, sections viewed, approximate time on site via periodic heartbeats, outbound link clicks, and coarse location derived from request headers (country/region/city when provided by the hosting edge) plus the connecting IP. These events are stored in our own systems for product and sales insight — not sold, and not used to build advertising profiles.
External AI and OCR providers
Prescription text may be processed by a pluggable OCR/AI provider to extract structured information. Each pharmacy's account controls whether customer or prescription data may be sent to an external provider at all — the default posture favors self-hosted processing until a pharmacy explicitly opts in to an external one.
Storage and retention
Prescriptions, invoices, and other attachments are stored in private object storage, accessible only via short-lived signed links — never a public URL. Retention periods are configurable per pharmacy, with a default assumption of 90 days after order completion for prescription-related records, after which they are purged unless a longer period applies under the pharmacy's own regulatory obligations.
Your rights
A customer can ask the pharmacy they ordered from to delete or export their data, subject to records the pharmacy is legally required to retain (for example financial or audit records). A demo-request submitter can ask us to delete their contact details at any time by emailing the address in the site footer.
Contact
Questions about this policy can be sent to the contact address in the site footer.