1. Introduction & Scope
Resewaro Technologies Inc. ("Resewaro", "we", "our", or "us") operates the website located at https://resewaro.com and provides an autonomous voice artificial intelligence receptionist and practice scheduling software platform for healthcare clinics (collectively, the "Service").
This Privacy Policy explains how we collect, use, disclose, and protect personal information in accordance with applicable Canadian privacy standards and healthcare information practices.
2. Distinction: Resewaro as Service Provider vs. Data Controller
To understand how your data is handled, please note the two distinct operational contexts:
- Website Visitors & Prospective Customers: When you visit our website (
resewaro.com), request a demo, or contact sales, Resewaro is the Data Controller of your business contact information. - Clinic Patients (Telephone Callers & Online Bookers): When you call a clinic powered by Resewaro AI or book an appointment online, your healthcare provider (the clinic) is the Custodian / Data Controller of your health and demographic data. Resewaro acts strictly as an Information Manager / Data Processor under contract with your clinic.
3. Information We Collect
A. Information You Provide Directly to Us:
- Website Inquiries & Sales Leads: Name, business email address, practice name, phone number, clinic location, and inquiry messages submitted via web forms.
- Clinic Administrator Account Data: Usernames, encrypted passwords, professional billing details, and staff contact information required to access the clinic dashboard.
B. Information Processed on Behalf of Healthcare Clinics (Patient Data):
- Caller telephone number (via telecommunications caller ID).
- Patient first and last name (with spelling verification protocol).
- Requested appointment type, doctor preference, and preferred appointment time slot.
- Basic booking notes.
4. How We Use Information
We process personal information exclusively for lawful healthcare practice purposes:
- To Deliver Autonomous Voice & Booking Services: Converting caller speech into appointment slot queries and confirming bookings in the clinic calendar.
- To Provide Real-Time Practice Alerts: Dispatching SMS appointment confirmations, pre-appointment reminders, and waitlist opening notifications.
- To Safeguard System Reliability: Detecting telephony errors, diagnosing network latencies, and verifying system uptime.
- Zero Foundation Model Training: We do NOT sell, rent, or use identifiable patient health records or audio recordings to train commercial public AI models.
5. Service Providers & Subprocessors
We work with enterprise infrastructure and technology partners who assist in delivering our autonomous scheduling services under strict confidentiality and healthcare data protection agreements:
- Cloud Hosting & Compute Infrastructure: Enterprise cloud hosting facilities located in Canada that provide secure server compute and isolated virtual environments.
- Managed Database Services: Enterprise cloud database infrastructure providing AES-256 encrypted storage, automated backups, and TLS 1.3 transmission.
- Telephony & Carrier Routing: Licensed telecommunications carriers facilitating inbound clinic telephone routing, SIP trunking, and SMS appointment notices.
- Real-Time Voice & Speech Infrastructure: High-reliability media streaming and speech recognition engines that process spoken caller dialogue ephemerally in real time.
- Language Processing & Natural Language Understanding: Enterprise conversational AI engines operating under strict enterprise zero-retention agreements where caller prompts are never retained or used to train third-party public foundation models.
A formal schedule of contracted third-party subprocessors is available to healthcare practice custodians upon request as part of our clinic Data Processing Agreement (DPA).
6. Canadian Cloud Hosting & Security Safeguards
- Data Residency: Resewaro maintains persistent application databases and backend services within certified Canadian cloud regions.
- Encryption Standards: All data in transit is encrypted using TLS 1.3 / HTTPS. All stored data at rest and persistent database backups are encrypted with AES-256.
- Access Control: Production access is restricted to authorized technical personnel via multi-factor authentication (MFA) and least-privilege role-based access control.
7. Data Retention & Erasure
- Website Visitor Data: Retained for the duration of the commercial relationship or until an erasure request is submitted.
- Clinic Patient Data: Governed strictly by the clinic’s Information Manager Agreement. Raw telephony audio streams are ephemeral and discarded post-call. Persistent booking logs are retained as instructed by the clinic custodian and securely deleted upon contract termination.
8. Individual Privacy Rights
Under Canadian privacy laws, individuals have the right to:
- Request access to personal information held about them.
- Request correction of inaccurate or incomplete personal information.
- Withdraw consent for promotional communications at any time.
Note for Clinic Patients: If you called a clinic powered by Resewaro and wish to exercise access or correction rights regarding your health record, please contact your healthcare clinic directly, as they are the legal Custodian of your records.
9. Contact Our Privacy Office
For inquiries regarding this Privacy Policy or our compliance practices, contact:
Privacy Officer
Resewaro Technologies Inc.
Edmonton, Alberta, Canada
Email: privacy@resewaro.com
Web: https://resewaro.com/privacy