Privacy Policy: WhatsApp Messaging

Last updated: 3 November 2026

Overview

DentXOne sends appointment confirmations, reminders and clinic updates to patients through WhatsApp, using the WhatsApp Business Platform (Cloud API) provided by Meta. This policy explains what patient data is involved, why we use it, who it is shared with, and how patients can control it.

DentXOne is a dental clinic management service operated by Flizk (flizk.com). Each clinic that uses DentXOne decides why patient data is collected. We process that data on the clinic's behalf to deliver the messages.

WhatsApp data we collect and process

We process only what is needed to send and track a message.

DataSourcePurpose
Patient nameClinic's patient recordPersonalise the message
WhatsApp phone numberClinic's patient recordDeliver the message
Appointment details (treatment, date, time, doctor)Clinic's appointment recordFill the message template
Clinic name and phoneClinic profileIdentify the sender and contact point
Delivery status (sent, delivered, read, failed)WhatsApp webhooksShow clinics whether a message arrived
Button replies (Reschedule, Cancel)Patient's tap on a messageUpdate the appointment
Replies typed by the patientPatient's WhatsApp messagePass to the clinic for follow-up

We do not send marketing or promotional messages through these templates. Message content is limited to appointment information and does not include diagnoses, prescriptions or treatment notes.

Sharing, storage, retention and security

Who receives the data. Message content and the patient's phone number are passed to Meta Platforms, the provider of WhatsApp, so it can deliver the message. Meta processes this data under its own terms and privacy policy. We share data with no one else for this purpose, other than our hosting provider, which stores it on our behalf.

Where it is stored. Delivery statuses and message logs are kept in our database, separated by clinic so one clinic cannot see another's data.

How long we keep it. Message logs are kept for 90 days, then deleted or anonymised. Appointment records follow the clinic's own retention rules.

Security:

  • Data is encrypted in transit (HTTPS/TLS).
  • WhatsApp access tokens are stored on our servers only, never in the app or browser.
  • Access to message logs is limited to authorised staff and to the clinic concerned.
  • Webhook requests from Meta are verified before they are processed.

Patient rights, data deletion and contact

Under India's Digital Personal Data Protection Act, 2023, patients can:

  • ask what personal data we hold about them
  • correct inaccurate data
  • withdraw consent to WhatsApp messages
  • ask for their data to be erased
  • raise a grievance with us

To make a request, email privacy@flizk.com with the patient's name, the clinic and the WhatsApp number. We reply within 30 days. Requests about clinical records are handled together with the clinic, since the clinic controls those records.

Data deletion instructions. To delete WhatsApp-related data, email privacy@flizk.com with the subject "WhatsApp data deletion". We delete message logs and contact details linked to that number from our systems and confirm by email. Data already held by Meta is governed by Meta's privacy policy.

Changes to this policy. We will update this page when our WhatsApp use changes and show the date of the latest update at the top.

Contact. Flizk, Chennai, Tamil Nadu, India · privacy@flizk.com

Questions about this policy? Contact us.