What CARE stores, where, and for how long.

What CARE stores: WhatsApp conversations, the documents you upload (service list, vaccination schedule, vet bios, emergency rules, hours), and operational metadata. Never clinical records.
Where data is stored: All conversation and knowledge-base data hosted on infrastructure inside the GCC. Data never leaves the region.
Retention: Active during your account's life. On cancellation: 30-day export window, then permanent deletion within 30 days.
Access: Only your Staff Console members plus the on-call Thamra Group engineer. All access logged.

02 — Regulatory posture

PDPPL, in-region hosting, and what we never touch.

PDPPL compliance: Conversation data, consent, retention, and deletion flows are designed to satisfy Qatar PDPPL. Downloadable one-pager for your compliance contact.
Clinical-records isolation: CARE has zero integration with ezyVet, IDEXX Cornerstone, or any PMS. There is no API, no SSO, no read-only access. Your clinical records system is fully sealed.
No medical advice (architectural): CARE is configured at the system level to refuse medical-advice prompts. It never diagnoses, never prescribes, never recommends treatment. Owners asking clinical questions are escalated to your vet team.
Emergency-escalation guarantee: Emergency keywords in any of the 5 dialects bypass normal flow and page your on-call vet within 60 seconds. Escalation rules and on-call rotation are defined by you and enforced strictly.

03 — Operational controls

Vet team override: Every conversation is visible in real time in the Staff Console. Your team can step in, edit a reply before it sends, or take full control instantly.
Emergency escalation audit: Every emergency-keyword trigger is logged with timestamp, keyword matched, on-call vet paged, and response time. Reviewable monthly.
Conversation export: One-click export of any conversation as CSV — useful for owner requests under PDPPL, escalation reviews, and outbound campaign reporting.
Data deletion on demand: Delete any pet owner's conversation history and phone number on demand from the Staff Console. Propagates to backups within 7 days.