ARI TECHNOLOGIES, S.A.S. de C.V., a commercial company incorporated under the laws of the United Mexican States, creator and operator of the "AriDoctor" platform (hereinafter,"AriDoctor", the "Controller" or "we"), with address at Calle Croto No. 19, Col. Palma Real, R/a. Ixtacomitán 1a Sección, C.P. 86143, Villahermosa, Centro, Tabasco, and contact email contacto@aridoctor.com.mx, is responsible for the processing and protection of your personal data under the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), its Regulations and other applicable regulations of the United Mexican States.
Scope of this notice. This document applies to the data that AriDoctor processes asController: visitors to this site, prospects (leads) and the doctors or clinics that contract the service. With respect to patients' data, AriDoctor acts only as Processor and the doctor is the Controller; that processing is governed by the privacy notice that each doctor makes available to their patients.
1. What personal data do we collect?
Depending on your interaction with us, we may collect the following categories of data:
- Identification and contact: name, email address, phone number and, where applicable, the name of the clinic or practice.
- Professional data (doctor users): professional license number (cédula profesional), specialty and issuing institution, needed to issue valid clinical documents.
- Account data: login credentials, configuration preferences and a record of activity within the platform.
- Billing data: the data needed for the subscription and charging, handled through our identity and payments platform (ARISYS) and the corresponding payment gateway. AriDoctor does not store your full card data.
- Technical and browsing data: IP address, device and browser type, generated when you visit this site.
We do not collect sensitive personal health data through this site. The processing of patients' medical records belongs to the doctor as Controller and takes place within the platform under the measures described in their own notice.
2. What do we use your data for?
Primary purposes (necessary for the service)
- Create, authenticate and manage your user account.
- Provide, operate and maintain the AriDoctor platform.
- Process your subscription and payments and issue tax receipts (CFDI).
- Provide technical support and handle requests.
- Comply with legal, tax and contractual obligations.
Secondary purposes (not necessary)
- Send you commercial communications, product news and surveys.
- Produce internal statistics to improve the service.
If you do not want your data to be processed for the secondary purposes, you may say so by sending an email to contacto@aridoctor.com.mx. Your refusal will not be a reason to deny you the services you have contracted.
3. Transfers and remissions of data
To operate the platform we rely on technology providers (sub-processors) that process data on our behalf and under our instructions, under zero data retention for trainingpolicies for their models:
- OpenAI, Anthropic and Groq: speech-to-text transcription, conversation and structuring of clinical notes.
- Google: cloud storage (the doctor's Google Drive), synchronization of appointments with their Google Calendar and infrastructure (see Use of Google data).
- Meta Platforms: communication with patients via WhatsApp.
- ARISYS and payment gateway: management of identity, subscriptions and charges.
Except for the remissions above and the cases provided for in article 37 of the LFPDPPP (e.g. a request from a competent authority), we do not transfer your personal data to third parties without your consent.
Use of Google data (Drive and Calendar)
If you authorize it, AriDoctor connects to your Google account to save prescriptions and receipts in your Google Drive and to create, reschedule and cancel in your Google Calendar the events for the appointments you book in AriDoctor. We request only the access needed for those functions (including the calendar.events permission) and you can revoke it at any time from the app itself or from your Google account.
Limited Use compliance. AriDoctor's use of raw or derived data received from Google Workspace APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. In particular:
- Google data is used only to provide you the functions described above, which are visible in the application.
- We do not use, transfer or sell Google Workspace data to create, train or improve artificial intelligence or machine learning models, whether generalized or our own.
- Google data is not sent to the AI models of our providers (OpenAI, Anthropic, Groq).
- We do not transfer it to third parties, except as needed to provide you the service, comply with the law or with your consent.
- We do not use it for advertising nor allow people to read it, except with your consent, for security reasons or by legal obligation.
4. Use of cookies and tracking technologies
This site does not use tracking, analytics or advertising cookies; it only stores your language and theme preferences. For details on the technologies we do use (e.g. loading typefaces) see our Cookie Policy. If in the future we add analytics tools, we will tell you and ask for your prior consent when the law requires it.
5. ARCO rights and revocation of consent
You have the right to Access your personal data, to Rectify it when it is inaccurate, to Cancel it when you consider it is not required for any of the purposes, and to Object to its processing for specific purposes, as well as to revoke the consent given.
To exercise any of these rights, send your request to contacto@aridoctor.com.mxstating: (i) your name and a means to receive the reply; (ii) a document proving your identity; (iii) a clear description of the data and the right you wish to exercise. We will reply within the periods set by the LFPDPPP (a maximum of 20 business days to respond).
Note: if you are a patient of a doctor who uses AriDoctor, your ARCO requests must be addressed to your treating doctor, who is the Controller of your medical record.
6. Deletion of data and of the account
You can request the deletion of your account and your personal data at any time, in either of these two ways:
- From the app itself (recommended): openSettings → Delete account and confirm. Deletion is carried out immediately and requires no further procedure.
- By email: write tocontacto@aridoctor.com.mx from the email associated with your account asking for deletion. We will handle your request within the following 30 calendar days.
What data is deleted. When you confirm deletion:
- Your access identity (credentials, active sessions and login token) is closed and deleted, and any active subscription is cancelled.
- Your profile and account data (name, email, phone, license number, avatar and preferences) is deleted or anonymized, and the connection to your Google Drive is revoked.
- Temporary audio recordings are deleted (which, in any case, are not kept after each clinical note is confirmed).
What data is kept and why. By legal obligation, your patients'electronic medical record must be kept for a minimum of 5 years(NOM-004-SSA3-2012 and the General Health Law), even after you delete your account. During that period the information is safeguarded under strict security measures, dissociated from your account; once the legal period has passed, it is permanently deleted or anonymized. We may also keep the minimum records required by tax obligations or for the defense of claims, for as long as the law provides.
If you want to confirm what data of yours we keep or the status of a deletion request, write to us at contacto@aridoctor.com.mx.
7. Security measures and retention
We implement reasonable administrative, technical and physical security measures to protect your data against damage, loss, alteration or unauthorized access (encryption in transit and at rest, role-based access control and audit logs). We keep data for as long as necessary to fulfill the purposes and the applicable legal obligations.
8. Changes to this notice
This privacy notice may be updated due to legal or organizational changes or changes in our practices. We will publish any modification on this same page, indicating the date of the last update.
For any question about this notice or the processing of your data, write to us atcontacto@aridoctor.com.mx. Applicable jurisdiction:Villahermosa, Tabasco, Mexico.