Data Deletion Instructions

Effective date: 16 May 2026

1. Your right to delete

Under the UK GDPR and the Data Protection Act 2018 (supervisory authority: the ICO), the EU GDPR, CCPA (California), the Israeli Privacy Protection Law, HIPAA (USA), and similar laws, you have the right to have your personal data deleted from Intelligent Clinic Management Platform.

2. How to delete your data inside the app

If you are a doctor / clinic owner:

Open Intelligent Clinic Management Platform (desktop or mobile).
Go to Settings → Reset clinic to permanently erase the whole clinic profile, patients, appointments, invoices and connections from our servers. You will be asked to confirm by SMS code.
To remove only your linked Cloud / Email / WhatsApp account (without deleting the clinic): Settings → Cloud & Email → click Disconnect on the connection. Then revoke the application in your provider's account at myaccount.google.com/permissions (for Google) or account.live.com/consent/manage (for Microsoft).
To remove just your WhatsApp Business connection: Settings → My WhatsApp Number → Disconnect.

If you are a patient of a clinic that uses Intelligent Clinic Management Platform:

Contact your clinic directly and ask them to delete your record. The clinic is the data controller for patient data; we (the SaaS operator) process patient data on their behalf and cannot delete it without their request.

3. How to request deletion by email

If you cannot use the in-app option, send an email to support@projectlineil.com with subject «Data deletion request» and include:

The email address or phone number associated with your Intelligent Clinic Management Platform account.
(Optional) The clinic name if you are a clinic owner.
A statement that you authorize the deletion.

We respond within 30 calendar days (GDPR Article 12(3)). The deletion is permanent and cannot be undone.

4. What gets deleted

Clinic profile, doctor account, all patient records, appointments, invoices, prescriptions, attachments, audit log entries, voice-call metadata (calls are not recorded — no audio or transcript is stored).
OAuth tokens, refresh tokens and API credentials stored on our servers for your linked accounts.
Backup snapshots are deleted on the next backup rotation (within 30 days).

We retain statutory audit log entries even after deletion — for UK clinics under the UK GDPR accountability principle (Article 5(2)) and records-management guidance, and for US clinics for 6 years per HIPAA §164.316(b)(2)(i) — but these contain only the metadata required by law (action, timestamp, signature) and never raw patient data.

5. Third parties

If you also want your data deleted at our subprocessors (Microsoft Azure, OpenAI, Twilio, Meta WhatsApp Cloud API), tell us in your deletion request and we will forward the request to them. Their own deletion policies still apply.

6. Contact

Data protection contact: support@projectlineil.com — Project Line, Israel.