Privacy Policy
ARCX MARKETING (“we”) builds and maintains automated WhatsApp agents used by clinics. This policy explains what we do with information that passes through our systems.
Our role
Each clinic we work with is the data controller for its own patients. The clinic owns its WhatsApp Business Account, its phone number, its hosting, and the database in which its patient conversations are stored.
ARCX MARKETING acts as a data intermediary on that clinic’s instructions. We operate two things: the messaging application that runs on the clinic’s own infrastructure, and a routing service that delivers inbound WhatsApp messages to the correct clinic system.
What passes through our routing service
WhatsApp delivers messages for all of our client clinics to a single endpoint. Our routing service reads the identifier of the phone number a message was sent to, and forwards that message, unmodified, to the clinic’s own system.
Messages pass through this service in transit only. Message content is not stored, logged, or read by ARCX MARKETING at any point.
What we store
The only data ARCX MARKETING retains is a routing table containing, for each client clinic: the clinic’s name, its WhatsApp phone number identifier, the address of its own system, and the time a message was last routed to it. This table contains no patient information of any kind.
What clinics store
On each clinic’s own systems, under their own accounts, the application records the WhatsApp number a patient messaged from, the content of the conversation, and any appointment details the patient volunteered. That data belongs to the clinic and is governed by the clinic’s own privacy policy.
The application does not request or store medical records, diagnoses, or test results, and does not provide medical advice.
Third parties
Operating the service requires these providers:
- Meta Platforms — delivers WhatsApp messages.
- OpenAI — receives message content in order to generate each reply. Each clinic holds its own account.
- Railway — hosting, in the Asia-Pacific region.
We do not sell data, and none of it is used by ARCX MARKETING for advertising, profiling, or model training.
Retention
Routing records are kept for as long as a clinic uses the service and are deleted when they stop. Patient conversations held on a clinic’s own systems are automatically purged after a retention period set by that clinic, 90 days by default.
Your rights
Under Singapore’s Personal Data Protection Act you may request access to, correction of, or deletion of your personal data.
If you are a patient of a clinic that uses our service, please contact that clinic directly — they hold your data and we act on their instructions. You may also write to us at ryanchamruiyang@gmail.com and we will pass the request on.
Data deletion requests
To request deletion of data held about you, email ryanchamruiyang@gmail.com with the phone number concerned and the name of the clinic. We will action or forward the request within 30 days.
Emergencies
Services built by ARCX MARKETING are not monitored in real time and must not be used for medical emergencies. In an emergency, call 995 or go to the nearest Emergency Department.
Changes
We may update this policy. The date at the top reflects the current version.
Contact
ARCX MARKETING60 Paya Lebar Road
#06-28 Paya Lebar Square
Singapore 409051
ryanchamruiyang@gmail.com
+65 8129 3753