Privacy Policy
Effective Date: March 6, 2026 · Last Updated: March 6, 2026
Who We Are
ClinicClaw is an AI-powered practice management platform built for healthcare clinics. We help practices automate patient communication, manage appointments, and grow their business through intelligent automation. ClinicClaw is operated by Metaphase Marketing LLC.
Contact: hello@clinicclaw.com
What Information We Collect
Information You Provide
- Practice name, contact email, phone number, and billing information when you create an account
- Practice branding, preferences, and configuration settings
Google Account (Gmail, Calendar, Business Profile, Analytics)
- We access your Gmail account to send patient communications (appointment reminders, follow-ups, recall campaigns) from your practice inbox on your behalf
- We read Gmail threads solely to detect patient replies and prevent duplicate outreach. We do not store, index, or analyze email content for any other purpose
- We access Google Calendar in read-only mode to surface appointment data in your dashboard
- We access Google Business Profile to retrieve and display your practice reviews
- We access Google Analytics in read-only mode to display website traffic data alongside your campaign metrics
HubSpot / Salesforce
- We create and update contact records, deals, and activity logs in your connected CRM on your behalf
Other Integrations (Jane App, Cal.com, Twilio, Meta Lead Ads)
- We read appointment and patient data to power scheduling automation
- We send SMS messages and receive inbound lead data on your behalf
Automatically Collected
- Usage data, session logs, and feature interaction data for product improvement
- IP addresses and browser metadata for security and fraud prevention
How We Use Your Information
- Provide and operate the ClinicClaw platform
- Execute automated patient communications you configure
- Sync data between your connected tools
- Display analytics and performance data in your dashboard
- Respond to support requests and send billing notifications
We do not:
- Sell your data or your patients' data to third parties
- Use Gmail content to serve advertising
- Train AI models on patient communication data without explicit consent
Google User Data — Additional Disclosures
ClinicClaw's use of data received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
- Gmail data is used only to send and read emails on behalf of the authenticated user's practice
- Gmail data is not transferred to third parties except as necessary to operate features the user has enabled
- Gmail data is not used for advertising or to build user profiles beyond what is necessary for the service
- We do not allow humans to read Gmail content unless you have explicitly shared it with support for troubleshooting, or we are required to do so by law
You can revoke access at any time from your Google Account Security settings.
Data Storage and Security
- All data is encrypted in transit (TLS 1.2+) and at rest (AES-256)
- Database hosted on Supabase infrastructure meeting SOC 2 standards
- Payment processing handled by Stripe — we never store raw card numbers
- Integration credentials are encrypted at rest and never exposed in logs
HIPAA Considerations
ClinicClaw offers a Business Associate Agreement (BAA) for practices that handle Protected Health Information (PHI). A signed BAA is required before PHI may be processed through ClinicClaw. Contact hello@clinicclaw.com to request a BAA.
Data Retention
- Account data is retained for the duration of your subscription plus 90 days after cancellation
- After 90 days, account data is permanently deleted upon request
- Activity logs are retained for 12 months for billing and audit purposes
Your Rights
Depending on your jurisdiction, you may have the right to access, correct, delete, export, or restrict processing of your personal data. Email hello@clinicclaw.com to exercise these rights. We respond within 30 days.
Service Providers
We share data with trusted service providers: Supabase (database), Vercel (hosting), Stripe (payments), Resend (email delivery), Twilio (SMS), and Anthropic (AI processing). Message content is processed to generate responses and is not used for model training. All providers are contractually bound to protect your data.
Cookies
We use essential cookies for authentication and session management only. We do not use third-party advertising cookies.
Changes to This Policy
We will notify you of material changes by email and by posting an updated version at clinicclaw.com/privacy. Continued use of ClinicClaw after changes constitutes acceptance.
Contact Us
Metaphase Marketing LLC
hello@clinicclaw.com
clinicclaw.com