Privacy policy
MedNest is software that helps medical and dental clinics answer patients who write to them by WhatsApp, Instagram, email or SMS. This policy explains what happens to your data when you write to a clinic that uses MedNest.
Who is responsible
The clinic you write to decides why and how your data is used and is the data controller. MedNest processes the data on the clinic’s behalf as a processor, under a data processing agreement with the clinic. MedNest is provided by Hoffy&co s.p., Slovenia (contact: info@mednest-ai.com).
What we process
- Your messages and the photos or files you send to the clinic, and the clinic’s replies.
- Contact details you use to write: name shown in the messenger, phone number, Instagram username, email address.
- Information you give the clinic, for example appointment requests or a health questionnaire you choose to fill in.
- Technical data needed for delivery (message IDs, delivery status, time).
Why
Only to let the clinic read and answer your messages, book and remind you of appointments, and keep the record the clinic is legally required to keep. We do not sell data, do not use it for advertising and do not build marketing profiles.
AI assistance
Incoming messages may be analysed by an AI model (Anthropic Claude) to suggest a reply and to flag urgent cases. Suggestions are always reviewed by clinic staff before anything is sent. The AI provider does not use the data to train its models.
Where data is stored
On servers in the European Union (Hetzner, Germany). Messages pass through the platform you chose (Meta for WhatsApp and Instagram, your email provider, the SMS provider) under their own terms.
How long
As long as the clinic needs it to treat you and as required by health-record law; conversation data not part of your medical record is deleted when the clinic no longer needs it or when you ask.
Your rights
You can ask the clinic for access to your data, correction, deletion, restriction or a copy, and you can object to processing. See Data deletion. You may also complain to the Slovenian Information Commissioner (ip-rs.si) or your local data protection authority.
Security
Encrypted connections, two-step login for all staff, access by role, encrypted storage of channel credentials, and a log of every action on patient data.
Last updated: 5 November 2026. Questions: info@mednest-ai.com