Privacy Policy

The Perla service is provided by Vladyslav Kutsyn, Mladá Boleslav, Czechia. Data questions: hello@getperla.eu.

Two roles matter here. For clinic account data we are the controller. For the content of patient conversations the clinic is the controller and we act as a processor on its instructions.

Account data: email, clinic name, password (stored only as a hash — we never see it).

Clinic profile: address, opening hours, doctors, services with prices, insurers, hand-off rules. This is what the clinic enters itself, and what Perla answers from.

Patient conversations: message and reply text, timestamps, language, and the page the chat was opened from.

Booking requests: the name and phone number the patient gave, plus a preferred time and reason for the visit.

Perla never asks a patient for card numbers, identity documents, insurance policy numbers or medical history. The assistant is instructed not to ask, and there are no payments in the chat at all.

We use no advertising trackers and pass nothing to ad networks.

Account and profile data are processed to perform the contract with the clinic. Patient conversations are processed on the clinic's instructions as a processor. Technical logs rest on the legitimate interest of keeping the service running and protected from abuse.

Database and authentication run on Supabase, region EU — Ireland (eu-west-1). The application itself runs on a server in Nuremberg, Germany (netcup).

Messages are sent to OpenAI to generate a reply. OpenAI processes them as a data processor and, under their API terms, does not use API request content to train their models.

Account and profile data for as long as the account exists. When an account is deleted, related data is deleted along with it.

Conversations and booking requests are kept until the clinic deletes them or closes the account. A custom retention period can be agreed on the Network plan.

You have the right to obtain a copy of your data, correct it, delete it, restrict processing and object to it. Write to hello@getperla.eu — we reply within 30 days, as GDPR requires.

If you are a patient and want a conversation deleted, contact the clinic directly: the clinic controls that data. We will act on its request.

All traffic runs over HTTPS. Access to clinic data is constrained at the database level by Row Level Security — a clinic technically cannot read another clinic's data even by tampering with the request. The widget's public key permits exactly one action: chatting as its own clinic.