Privacy Policy

1.Information we collect

Depending on how you use the platform, we collect:

• Account and business information: name, email, phone number, pharmacy or warehouse name, address, and role.
• Operational data: products, inventory, batches, expiry dates, sales, invoices, and marketplace orders.
• Prescription data: when you use the prescription-scanning feature, prescription images and the medicines extracted from them may be processed to provide the service.
• Technical data: IP address, device and browser type, usage logs, and cookies.
• Payment data: marketplace payments between pharmacies and warehouses are typically made in cash on delivery; where third-party payment providers are used, their data is processed under their own policies.

2.How we use information

• Operate the platform and provide point-of-sale, inventory, and marketplace services.
• Process orders between pharmacies and warehouses and facilitate communication between them.
• Improve the service and provide smart features such as demand forecasting and drug-interaction checks.
• Send operational notifications and account-related messages.
• Comply with legal obligations, protect platform security, and prevent fraud.

3.Sharing and disclosure

We do not sell your data. We may share limited information only in the following cases:

• With warehouses and suppliers when you place a marketplace order, to the extent needed to fulfil and deliver it.
• With service providers who help us operate (hosting, email delivery, analytics) under confidentiality agreements.
• Where legally required or in response to a lawful request from a competent authority.

4.Patient and prescription data

The pharmacy remains the controller of its patients’ data, and Medetora acts as a processor handling that data on the pharmacy’s behalf and per its instructions. The pharmacy is responsible for obtaining the necessary consents and complying with applicable pharmacy-practice and data-protection regulations.

We apply controls to limit access to sensitive data and do not use patient data for any purpose other than providing the service.

5.Cookies

We use cookies and similar technologies to remember your preferences (such as language), keep you signed in, and analyse performance. You can configure your browser to refuse them, but this may affect some platform features.

6.Data security

We follow reasonable technical and organisational measures to protect your data from unauthorised access, loss, or alteration, including encryption in transit and access controls. However, no system can be guaranteed 100% secure.

7.Data retention

We retain your data for as long as you use the platform and as needed to provide the service and meet our legal obligations. When an account is closed, we delete or anonymise the data within a reasonable period, unless the law requires otherwise.

8.Your rights

You may request access to, correction of, or deletion of your personal data, and object to certain processing. To exercise your rights, email us at contact@medetora.com.

9.Hosting and transfers

Your data may be stored and processed on servers operated by trusted providers that may be located inside or outside Syria. We take reasonable steps to ensure your data is protected wherever it is processed.

10.Children’s privacy

The service is intended for businesses and professionals and is not directed at children under 18; we do not knowingly collect their data.

11.Changes to this policy

We may update this policy from time to time. We will post the updated version on this page and revise the "Last updated" date; your continued use of the platform constitutes acceptance of the changes.

12.Contact us

For any question about this policy or your data, contact us at contact@medetora.com.