Privacy Policy

Last updated: 2026-11-08

Docofolio is a platform that lets doctors, medical centres and hospitals build their websites, receive bookings and keep patient records. This policy explains what data we collect, why, and how we protect it.

1. Who is responsible for the data

• Account data (the doctor or centre that signs up): Docofolio is responsible for it.
• Patient data that patients submit on a doctor's site (bookings, forms) or that a doctor enters in Case Records: the doctor or centre owning the site is responsible for it, and Docofolio processes it on their behalf only to provide the service.

2. What we collect

• Account data: name, email, password (stored encrypted), account type, plan and subscription dates.
• Site content you add: bio, services, photos, clinic addresses and hours, team members.
• Booking and form submissions from patients: name, phone and any fields the doctor chose to ask for.
• Case Records (Premium plans and above): the data and files (such as X-rays and lab results) the doctor uploads.
• Payment proofs you upload when paying by InstaPay or Vodafone Cash.
• Anonymous visit statistics for each site (page views, visit source, device type, button clicks) to show the doctor their statistics.

3. How we use it

• To run your website and deliver bookings and messages to you and your assistants.
• To manage your subscription, verify payments and contact you about your account.
• To improve the platform and protect it from misuse.

We do not sell personal data, and we do not use patient data for advertising.

4. Sharing

We only share data with service providers we need to run the platform (such as hosting and email delivery), under confidentiality obligations, or when required by Egyptian law. If a doctor enables a tracking pixel (e.g. Meta or TikTok) on their site, visit data is sent to that provider under the doctor's responsibility.

5. Protecting patient data

• Case Records files are stored in private storage and can only be opened by the signed-in account owner.
• Clearing the whole Case Records table requires re-entering the account email and password.
• Assistants only see the sections the doctor allows.
• Connections to the platform are encrypted (HTTPS).

6. Retention and deletion

We keep data while the account is active. You can delete bookings, messages, case records and files at any time from your dashboard, and you can ask us to delete your account entirely through support. Deleted data may remain in encrypted backups for a limited period before it is permanently removed.

7. Your rights

You can access, correct or export your data (bookings and case records can be exported as CSV) or ask for its deletion. Patients who want to access or delete their data should contact the doctor or centre directly, and we will help the doctor fulfil the request.

8. Cookies

We use essential cookies for sign-in, security and language preference. Doctors' sites may use analytics or advertising pixels only if the doctor enables them.

9. Changes

We may update this policy and will show the update date at the top. Significant changes will be announced inside the dashboard.

10. Contact

For any privacy question, contact our support team through the WhatsApp link at the bottom of this page.