Privacy Policy

Aestheplan is built for professional cosmetic clinics and aesthetic medicine teams. This Privacy Policy explains how we handle information when clinics use our website, request a demo, or use Aestheplan services.

This page is provided for transparency and product readiness. It is not a substitute for legal advice. Clinics should review their own consent, privacy, and patient-record obligations with qualified counsel.

Google Calendar and Google user data

When a clinic administrator chooses to connect Google Calendar, Aestheplan requests Google OAuth access to identify the connection and to synchronize calendars and events. This connection is optional and can be disconnected at any time from the clinic settings.

Google data we receive

• Google account email and basic profile information supplied during OAuth, used to identify the connected account. Aestheplan stores the connected Google email.
• The connected account's calendar list, including calendar IDs, names, colors, access roles, and whether a calendar is primary or selected for synchronization.
• Events from calendars selected by the clinic, including event IDs, titles, descriptions, start and end times, status, color, and synchronization metadata such as etags and sync tokens.

How Google data is used

• To show the clinic's available calendars and let its administrator select which calendars are synchronized.
• To import selected Google Calendar events into Aestheplan clinic appointments and keep imported appointments updated.
• To create or update Google Calendar events for Aestheplan appointments that the clinic has chosen to synchronize, enabling bidirectional appointment synchronization.

When Aestheplan creates or updates an event, the event may include the appointment's client name, phone number, assigned employee, appointment time, confirmation state, and clinic note because those are the appointment details required for the selected calendar sync.

Storage, security, and access

OAuth access and refresh tokens are stored encrypted at rest using Aestheplan's application encryption. We also store the connected account email, calendar IDs and selection state, sync tokens, and event metadata needed to operate the sync. Google API requests use encrypted transport. Access is limited to the clinic's authorized administrators and to the service components needed to operate that clinic's connection; the integration requests only the Calendar list and event scopes used for this functionality.

Sharing and prohibited uses

We send Google data to Google only when calling the Google APIs needed to operate the connected calendar. We may use infrastructure and security providers that process data for Aestheplan's operation, subject to their service role. We do not sell or rent Google user data, and we do not use it for advertising or share it with advertisers.

Google Workspace API data is not used to develop, improve, or train generalized or non-personalized artificial intelligence or machine-learning models.

Retention, disconnect, and deletion

Google Calendar connection data is retained while the clinic keeps the connection active. Disconnecting deletes the stored Google Calendar connection, including its OAuth tokens, and the associated stored calendar records, selections, and sync tokens. Disconnecting does not automatically delete local Aestheplan appointment records previously created or updated through the sync; those records follow the clinic's normal retention and deletion controls. Deleting a clinic account deletes its associated connection records together with the clinic.

Information we collect

• Contact details submitted through demo or contact requests, such as name, clinic name, work email, and message content.
• Account and clinic information needed to operate the service, such as user role, clinic settings, output language, approved procedure categories, and product categories.
• Client information entered by clinic users, which may include profile data, practitioner notes, consultation photos, and analysis history.
• Operational and audit data, including request time, response status, model version, prompt version, token usage, calculated cost, IP-derived security signals, and system logs.

How we use information

• To provide AI-assisted draft consultation reports for professional review.
• To maintain client history, progression comparison, and clinic-controlled recommendation settings.
• To secure the platform, investigate abuse, troubleshoot errors, and maintain audit trails.
• To respond to demo, support, billing, and administrative requests.
• To improve product reliability, usability, and compliance controls.

Clinic responsibility and consent

Clinics are responsible for obtaining appropriate client consent before uploading photos, notes, or other personal data to Aestheplan. Clinic users should only upload information they are authorized to process and should follow applicable privacy, health data, and professional obligations.

AI processing

Aestheplan sends AI requests from the backend only. API keys are not stored in the iOS app. AI outputs are draft decision-support materials for professional review and are not autonomous diagnoses, prescriptions, or medical decisions.

Data sharing

We may share information with infrastructure, hosting, security, analytics, email, and AI-processing providers that help operate Aestheplan. These providers should process data only for the services they provide to us. We do not sell client photos, clinic records, or Google user data.

Retention

We retain account, clinic, audit, and analysis records for as long as needed to provide the service, comply with legal obligations, resolve disputes, support auditability, and enforce agreements. Clinics may request deletion or export where available and legally permitted.

Security

We use technical and organizational safeguards designed to protect information, including backend-only AI calls, access controls, encrypted transport, immutable completed analyses, audit logs, and least-privilege operational practices. No system can be guaranteed completely secure.

European privacy rights

Individuals in the European Economic Area may have rights to access, correct, delete, restrict, object to processing, or receive a copy of their personal data. Where Aestheplan processes data on behalf of a clinic, requests may need to be directed to that clinic as the data controller.

Contact

For privacy questions, contact aestheplan@tenvori.com.