Privacy Policy
Last updated: 6 June 2026
Your privacy matters. This policy explains what Arlay collects, how it is used, and the choices you have.
Who we are
Arlay provides an AI assistant that clinics use to answer leads and book appointments over WhatsApp. This policy explains what we collect and how we use it. For data about a specific clinic's patients, the clinic is the data controller and Arlay acts as its processor.
Information we collect
- Clinic account details: name, owner email, vertical, location, business hours, treatments and prices.
- Lead and conversation data: WhatsApp phone number, display name, the messages exchanged, detected language, and treatment interest.
- Booking data: chosen appointment times, status, and reminders.
- Connection credentials needed to operate channels and calendars, stored securely.
How we use it
We use this data to answer leads in seconds, qualify them, offer real availability, book appointments, send reminders, and show the clinic its performance. We do not sell personal data.
Service providers
We share data only with the processors needed to run the service: Meta / WhatsApp Business Platform and Twilio (messaging), Google Calendar (scheduling), Anthropic (AI replies), and Supabase (database and authentication). Each processes data on our or the clinic's behalf.
Data retention
We keep conversation and booking data for as long as the clinic's account is active, or as required to provide the service. Clinics can request deletion of their data at any time.
Your rights
Depending on your region, you may have the right to access, correct, or delete your personal data, or to object to its processing. Contact us to exercise these rights.
Contact
Questions about this policy? Email privacy@arlay.app.