Privacy Policy
Effective July 2026 — plain language on purpose.
No patient files. Sales anonymous by default.
DamanPharma records no patient identity by default: sales are anonymous, prescriptions stay on paper, and no field in the system links a sale to a person unless your pharmacy chooses to. If you enable the optional client accounts (for credit and insurance coverage), every personal field in them is sealed with keys only your pharmacy holds — to us it is unreadable ciphertext. There is nothing readable about your patients to breach, subpoena, or mine.
What we do store
Your pharmacy's business data (catalog, stock, purchases, anonymous sales) and staff accounts (name, email, role, hashed password). If your pharmacy turns on the optional client accounts, client records (name, contact, insurance identifiers, balances) are stored encrypted under keys only your pharmacy holds — we store ciphertext we cannot read. Each field exists to run your pharmacy — nothing is collected for any other purpose.
Who can see it
Your staff, under the roles you assign. Platform staff have no standing access to your business data: tenant isolation is enforced inside the database itself (row-level security), and the admin portal is built without any path to tenant operational data.
No trackers, no resale, no mining
Zero third-party trackers, fonts, or scripts anywhere — including this page. We never sell data, never mine it across pharmacies, and never train models on it. The $20/month subscription is our only revenue.
Where your data lives
On our EU server (Madrid, Spain), disclosed under Morocco's Law 09-08 with CNDP declaration, with nightly encrypted-at-rest backups. Your data never leaves this disclosed location.
Your rights & exit
Owners can export every byte of their pharmacy's data, self-service, at any time — even after the subscription lapses. Non-payment makes the account read-only; it never deletes data. On offboarding, your data is handed to you and then permanently erased. Questions: [email protected].