Privacy policy
Last updated: July 7, 2026
Salumbra is a patient-reported outcomes platform. This notice explains what data we process, why, and what rights you have. It is written to be read, not to hide behind.
What we process
Account data: the clinician’s name and email address, managed through our authentication provider.
Patient data: contact details (such as a WhatsApp number) and responses to validated questionnaires, entered or collected through the platform by the treating clinician.
Usage data: product analytics events and the cookies needed for sessions and language preference.
Waitlist: email, specialty, and country, when you sign up voluntarily.
What we use it for
Delivering questionnaires over WhatsApp, SMS, or email; scoring responses; and showing the treating clinician how their patient is evolving.
Sending transactional email (confirmations, invitations) and improving the product based on aggregate usage.
We do not sell personal data. We do not use patient data for advertising.
The relationship with your clinician
Patient data is processed on behalf and under the responsibility of the treating clinician or clinic, who decides which patients to enroll and which questionnaires to send. The clinician is responsible for informing their patients about this processing.
If you are a patient and no longer want questionnaires, you can ignore them, ask your clinician, or write to us directly and we will stop sending them.
Who we share data with (processors)
We rely on infrastructure providers to run the service: Convex (database), Vercel (web hosting), WorkOS (authentication), Postmark (transactional email), Meta’s WhatsApp Business Platform (message delivery), and PostHog (product analytics).
These providers may operate infrastructure outside Mexico. Each receives only the data needed for its role.
Your rights
You can request access, rectification, deletion, or objection to processing by writing to privacidad@salumbra.com. We respond within 20 business days.
Retention and security
We keep data while the account is active or while we are required to retain it. You can request deletion of your account and data at any time.
We protect data with encryption in transit and access controls. No system is infallible; if an incident affects your data, we will notify you.
Changes and contact
If this notice changes, we will update the date on this page. Questions: privacidad@salumbra.com.