Privacy Policy

1. Data Controller

TotalMed, a product operated by Multistartup SpA (RUT 78.170.829-1, Chile), is the data controller for the account data of its customers (clinics). You can contact us at hola@totalmed.lat with any questions about your data.

2. Data We Collect

• Account data: your name, email address, phone number, clinic name and details, country, and tax identification information.
• Operational data you enter: patient information, appointments, records, payments, and inventory that your clinic records on the platform.
• Payment data: handled by our payment processor, Paddle. We do not store card numbers on our servers.
• Usage data: basic technical information, including access logs, device, and browser information, used for security and service improvement.

3. How We Use Data

• To provide and maintain the clinical management service.
• To process subscriptions and payments through Paddle.
• To provide support and send you important service notices.
• To maintain security, prevent fraud, and meet legal obligations.
• To improve the platform’s features and performance.

4. Patient Data: Our Role

For patient data entered by a clinic, the clinic is the data controller and we act as the data processor, processing that data only to provide the service and in accordance with the clinic’s instructions. We do not use patient data for our own purposes or sell it.

5. Who We Share Data With

We share data only with providers that enable us to operate, subject to confidentiality and data protection agreements:

• Paddle.com Market Limited — payment processing and invoicing (Merchant of Record).
• Supabase — cloud database and authentication infrastructure.
• Messaging providers, including email and WhatsApp providers, for service notifications.

We do not sell or rent your personal data to third parties.

6. International Transfers

Because we operate across several Latin American countries and use cloud providers, some data may be stored or processed outside your country. We apply reasonable safeguards to protect it in accordance with this policy.

7. Security

We use encryption in transit (HTTPS), role-based access controls, clinic-level data isolation, and backups. No system is completely infallible, but we work to protect your information using reasonable industry standards.

8. Data Retention

We retain your data while your account is active and for the period necessary to meet legal obligations. After cancellation, you may request an export of your data for a reasonable period, after which it may be deleted or anonymized.

9. Your Rights

You may request access to, correction, deletion of, or objection to the processing of your personal data, as well as a copy of it, by writing to hola@totalmed.lat. We will respond within the timeframes required by applicable law.

10. Cookies

We use cookies and similar technologies that are strictly necessary to sign in and maintain session security, as well as basic measurements to improve the service.

11. Changes to This Policy

We may update this policy and will publish the current version on this page with its date. We will notify you of material changes through your registered contact methods.

12. Governing Law

This Privacy Policy is governed by the laws of Chile. Any dispute shall be resolved in the courts of Santiago, Chile. If there is any conflict between this English version and the original Spanish version, the Spanish version prevails.