Privacy notice

If you are a patient: the essentials

Your clinician sends you questionnaires through Salumbra to follow your treatment. Your answers are seen by your treating clinician. Salumbra stores them and computes scores on your clinician’s behalf; it does not sell them, use them for advertising, or share them with anyone beyond the providers needed to run the service.

You can stop messages at any time: reply STOP on WhatsApp or SMS, or write to privacidad@salumbra.com. To access, correct or delete your data, contact your clinician, who is responsible for it, or write to us and we will route the request.

Data controller

Salumbra ("Salumbra"), operated from the United States, reachable at privacidad@salumbra.com, is the controller for the personal data of clinicians who create an account and of visitors to salumbra.com.

Patient data is collected by the treating clinician or clinic, who is the controller under Mexico’s LFPDPPP. Salumbra acts as processor: it handles that data on the clinician’s instructions and under the data processing agreement published in this legal section.

Personal data we process

Depending on your relationship with Salumbra:

• Clinicians: name, email, specialty, practice name and contact details, and billing details (legal name, tax ID if provided, last four card digits; the full card number is processed by Stripe and never reaches Salumbra).
• Patients, registered by their clinician: name, phone, email, date of birth, optional clinical identifier, the medical event being followed, and their answers to validated questionnaires with derived scores. These are sensitive personal data (health data) and receive the reinforced measures described below.
• Site visitors and waitlist: email, specialty and country when you sign up voluntarily; aggregate browsing data.
• Technical data: IP address, browser type, product usage events, and the strictly necessary cookies for session and language.

Purposes

Primary purposes, necessary for the service:

• Sending questionnaires over WhatsApp, SMS or email, receiving answers, scoring them and showing the patient’s trajectory to their clinician.
• Producing outcome reports the clinician chooses to share.
• Managing accounts, authentication, teams and billing.
• Transactional email and messages (invitations, reminders, confirmations).
• Security, abuse prevention, audit logging and legal compliance.

Secondary purposes

For clinician and visitor data only: product news and aggregate usage measurement to improve the product. You can object by writing to privacidad@salumbra.com; your account keeps working.

Patient data is used for no secondary purpose. The anonymized research export removes direct identifiers and is requested only by the treating clinician.

Transfers and processors

We do not sell personal data. We share data only with providers that process it on Salumbra’s behalf, each receiving only what its role needs, under confidentiality and processing terms:

• Convex (database and functions, United States).
• Vercel (web hosting, United States, global network).
• WorkOS (authentication and organization management, United States).
• Stripe (payments and invoicing; receives the clinician’s payment details, never patient data).
• Postmark (transactional email).
• Meta’s WhatsApp Business Platform and Twilio (patient message delivery: they receive the phone number and message text).
• PostHog (product analytics; receives no patient or health data).
• Sentry (error monitoring; receives no request bodies, cookies or patient identifiers).

International transfers

Our providers operate infrastructure outside Mexico, mainly in the United States. Transfers are made under article 37 of the LFPDPPP as necessary for the service you or your clinician contracted, with contractual clauses requiring providers to protect the data.

Your rights (ARCO) and withdrawal

You can access, rectify, cancel or object to the processing of your data, and withdraw consent. Write to privacidad@salumbra.com with your name, your relationship with Salumbra (clinician, patient or visitor), the right you exercise and a way to reply. We answer within 20 business days and, where the request proceeds, act within the following 15 business days.

If you are a patient, your clinician is the controller; you can go to them directly or write to us and we will help route the request.

Clinicians can also exercise these rights inside the app: export and delete patients from their profile, and delete the whole organization from Settings, which erases all of its patients’ data.

Limiting use

Patients: reply STOP to any message to end automated messages on that channel.

Clinicians: pause all patient sends from Settings > Communications and unsubscribe from product email via the link in each email.

Visitors: site analytics honors the browser’s Do Not Track signal and uses no session recording.

Cookies

We use strictly necessary cookies to keep you signed in and remember your language. Product analytics uses a first-party identifier not shared with third parties for advertising. We use no advertising cookies.

Retention and security

We keep data while the account is active. Deleting a patient or an organization removes the data from the production database immediately and from backups on their rotation cycle. Billing records are kept as long as applicable tax law requires.

We protect data with encryption in transit (TLS) and at rest at our providers, access control by organization and role, unique-token survey links, an audit log of actions on patients, and daily backups. Details are on the security page.

If a breach significantly affects your rights we will inform you, and the responsible clinician where patient data is involved, without undue delay.

Changes and contact

Changes are published on this page with their date; if a change matters to you we will notify you by email. Questions and requests: privacidad@salumbra.com.