Privacy Policy
This policy explains how Anto International Consulting, LLC ("we"), 16192 Coastal Hwy, Lewes, DE 19958, United States, handles personal data in NialSoft, our CRM software for aesthetic clinics. Contact: ceo@antoconsulting.com.
1. Roles
Clinics that subscribe to NialSoft decide which data they store about their patients and customers. For that data the clinic is the controller and we act as its processor, following its instructions. For the account data of clinic staff (name, email, login activity) we are the controller.
2. Data we process
- Clinic staff accounts: name, email, role and activity logs.
- Data the clinic enters about its patients: contact details, appointments, records, payments and consents.
- Data from Meta Platforms, when the clinic connects its own accounts: messages and basic profile (name, username, profile picture) of people who write to the clinic on Instagram, Messenger or WhatsApp; comments on the clinic's posts; insights of the clinic's own Page and Instagram account; answers to the clinic's own lead ad forms with the ad and campaign names; and the access tokens needed to provide the service.
3. Purpose
We use this data only to provide NialSoft to the clinic that connected it: showing and answering conversations in the shared inbox, publishing the clinic's content, showing its metrics and bringing its leads into the CRM, plus security, support and billing. We do not sell personal data, do not use Meta Platform data for advertising or profiling, do not transfer it to data brokers and do not combine data between different clinics.
4. Service providers
We use providers that process data on our behalf under contract: cloud database and hosting (Supabase, Vercel, Hetzner), error monitoring (Sentry) and, when the clinic enables it, AI services to translate or transcribe messages (Google Gemini). They may not use the data for their own purposes.
5. Retention
Data is kept while the clinic's subscription is active. If a clinic disconnects a Meta account, we stop receiving data from it and delete its access tokens. When a subscription ends, the clinic's data is deleted within 30 days, unless the law requires us to keep it longer.
6. Security
Encrypted connections (HTTPS), per-clinic access control, role-based permissions, row-level security in the database and daily backups.
7. Your rights
You can request access, correction, deletion or a copy of your data, or object to its processing. Patients of a clinic should contact the clinic, and we will help it respond. You can also write to ceo@antoconsulting.com. See how to delete your data.
8. Changes
We will publish any change on this page with its date.