Pre-launch version
Seshu is in its pilot phase. This document may be updated before the official launch.
Privacy Policy
Last updated: 2026-11-03
This policy explains what personal data Seshu (سيشو) processes, why, who it is shared with, how long it is kept, and how to ask for it to be deleted.
Seshu is a WhatsApp reception assistant that clinics use to answer administrative questions and manage appointments. It does not give medical advice and does not handle emergencies. Seshu is currently in its pilot phase.
Seshu does not handle emergencies. Call the ambulance on 123 or go to the nearest emergency department. Do not wait for a reply on WhatsApp.
1. Who is responsible for the data
When a patient messages a clinic that uses Seshu, the clinic decides why and how the patient’s data is used. Seshu processes that data on the clinic’s behalf, only to provide the service to the clinic.
2. Data we store about patients
We store only what is needed to manage appointments:
- Name
- Phone number (WhatsApp)
- Appointment time
- The clinic the patient contacted
- Whether the patient has given consent
We never store complaints, symptoms, diagnoses or other health details. If a message contains this kind of information, its text is not saved and the conversation is handed to the clinic team.
3. Consent
Consent is requested on the patient’s first contact on WhatsApp, before a name or message text is stored. Until then, we keep only the phone number and the consent state, and a patient who does not consent is deleted after 48 hours.
4. Message text
To understand and answer a request, the content of each message is processed. The text of messages is deleted after 3 days by default.
5. Why we use the data
- To answer patients’ administrative questions on the clinic’s behalf
- To book, reschedule and cancel appointments in the clinic’s schedule
- To hand conversations over to the clinic team when needed
- To keep the service secure, prevent misuse and fix problems
- To count conversations per clinic for billing (counts only, not content)
We do not sell personal data, we do not use it for advertising, and we do not use patients’ messages to train AI models.
6. Automated replies and AI
Seshu uses an AI model to understand messages and to draft replies about administrative matters. Appointment times always come from the clinic’s real schedule and are checked again by the system before a booking is confirmed.
The AI does not make medical decisions. Medical, urgent or unclear messages, and any request to speak to a person, are handed to the clinic team.
7. Service providers (sub-processors)
We use the following providers to run Seshu. They process data only to provide their service to us, for the purposes above.
| Provider | What it does for Seshu |
|---|---|
| Meta (WhatsApp Business Platform) | Sends and receives WhatsApp messages |
| YCloud | WhatsApp provider that connects Seshu to the WhatsApp Business Platform |
| Supabase | Database (European Union, Frankfurt region) |
| Hostinger | Server that runs Seshu’s workflows |
| OpenAI | AI model that understands messages and drafts replies |
Some of this processing happens outside Egypt, for example in the European Union. We limit what each provider receives to what it needs.
8. How long we keep data
| Data | How long it is kept |
|---|---|
| Message text | Deleted after 3 days by default |
| Patients who have not consented | Deleted after 48 hours |
| Patients with no activity | Anonymized after 12 months without activity |
| Name, phone number, appointments | While the clinic uses Seshu, or until erased on request |
9. Access and erasure
Patients can ask to see their data, correct it, or have it erased, and can withdraw consent at any time.
- Through the clinic: contact the clinic you message on WhatsApp. It will handle the request with us.
- By email to Seshu: write to abdelrahmank12a@gmail.com with the WhatsApp number you used and the name of the clinic. We may need to check that the number belongs to you.
When data is erased on request, it is deleted from Seshu. You can still contact the clinic directly, for example by phone.
10. How we protect data
- Encrypted connections (HTTPS/TLS) between the services that make up Seshu
- Each clinic can see only its own data, enforced by access rules in the database
- Automated services have only the permissions they need
- Access keys are kept in a secrets vault, not in code
- Storing as little data as possible, and deleting it automatically as described above
No system is completely secure. If a security incident affects personal data, we will inform the affected clinics.
11. This website
This website uses no cookies, analytics, tracking, forms, or third-party scripts or fonts. It is hosted on Cloudflare Pages, which may keep standard technical logs (such as IP address and the page requested) for security.
12. Children
Seshu is not meant to be used by children on their own. Appointments for a child should be made by a parent or guardian.
13. Emergencies
Seshu does not handle emergencies. If a message looks like an emergency, Seshu tells the patient to call the ambulance on 123 or go to the nearest emergency department, and alerts the clinic team. In an emergency, call 123 directly — do not wait for a reply on WhatsApp.
14. Changes to this policy
We may update this policy. The date at the top shows the current version.
15. Contact
Questions or requests about privacy: abdelrahmank12a@gmail.com.
Patients can also reach us through the clinic they message.
See also: Terms of Service