Care Privacy and Chat Notice
This notice covers Care profile browsing, basic reach measurement and optional assistant chat.
Updated 12 September 2026
V8 is a closed-preview service. It is not medical advice, diagnosis, or an emergency service.
Profile browsing and reach measurement
Browsing needs no account. Public profile views and WhatsApp/telephone clicks are counted. The network address and limited browser information are converted into a keyed digest that changes by day and profile; raw addresses and browser details are not stored in this measurement table. This is pseudonymization, not a guarantee of anonymity. No measurement cookie, persistent browser ID, search text or chat content is sent. Daily digest records expire after 35 days. The sum of daily unique visitors is not a count of people. Do Not Track and Global Privacy Control browser choices disable collection.
1. Data controller
The data controller is Mobisera Bilişim İç ve Dış Ticaret Limited Şirketi. Postal address: Harbiye Mahallesi, Bostan Sokak No:15 Kat:5, Şişli, Istanbul, Türkiye. Data-subject requests may be sent to info@doktorclub.com.
2. Data processed
We process the selected physician, chat messages and replies, language, consent and notice-version records, timestamps, response mode, a one-way network-address hash for security, and limited browser information. Message history is not kept in browser storage; an HttpOnly security cookie only links the same browser to server-side history.
3. Purpose and legal basis
Data is processed to provide the requested chat, show earlier conversations in the same browser, answer practical physician and clinic questions, prevent abuse, and let you export or delete records. Separate explicit choices are presented for chat processing and external AI use. Rule-based mode may be used when external AI consent is declined.
4. Health-data boundary
Content entered in chat may contain health data. Messages are encrypted on DoktorClub servers. Raw content detected locally as health-related or urgent is not sent to the external AI provider; the service uses a safe minimum intent label or a local response. Do not submit identity numbers, contact details, medical documents, or unnecessary sensitive data. In an emergency, do not wait for chat; call 112.
5. External AI
If you separately opt in, only a minimized, de-identified representation of an allowed clinic-logistics intent and public physician-profile facts may be sent as a structured request to the external AI provider. Raw chat history, names, phone numbers, email addresses, identity numbers, and detected health content are not included. Provider output that fails the safety gate is discarded and replaced with a rule-based response.
6. Retention and deletion
Each conversation is encrypted and retained on DoktorClub servers for no more than 365 days from its start, then automatically deleted. Deleting sooner removes it from the active service database. Copies in security backups, if any, are unavailable to the normal service and expire through the backup lifecycle. You may export your chat history as JSON at any time.
7. Security and access
Controls include TLS in transit, envelope AES-256-GCM encryption on the server, key versioning, HttpOnly and SameSite cookies, CSRF protection, rate limits, and access logging. Clearing the same-browser security cookie may remove automatic access to history; you may then exercise your rights by contacting the controller.
8. Your rights
Subject to Article 11 of Turkish Law No. 6698, you may ask whether data is processed, request information, correction, deletion or destruction, learn recipients, object to qualifying automated results, and seek compensation for unlawful processing. You may withdraw consent for future processing. Identify the V8 chat and approximate date in a request; do not send medical documents.
9. Notice and retention version
This contract version is dc-global-v8-chat-365d-v1. The current external-AI notice version is supplied by the server on the consent screen. A material change to purpose, recipient, provider, or retention requires a new version and, where applicable, a new explicit choice.