Privacy Policy

1. Overview

Vireon Labs Solutions (“Vireon Labs,” “we,” “us,” or “our”) provides Afterglow, an AI-powered texting and voice front-desk assistant that aesthetic and medical clinics (“Clinics,” “Clients”) use to communicate with their patients and prospective patients. This Privacy Policy explains what information we collect, how we use it, and the choices available to you, whether you're a visitor to this website, a Clinic evaluating or using Afterglow, or a patient who has texted or called a Clinic that uses Afterglow.

We are registered in Malaysia and serve clients internationally. By using this website or the Service, you agree to the collection and use of information as described here. If you don't agree, please don't use the Service.

Business address: Taman Ipoh Baru, Malaysia
Founder: Roshen Perumal

2. Who this applies to

This policy covers three distinct groups, and it's worth being clear about the difference:

• Website visitors and leads — anyone browsing tryafterglow.pro or submitting the “Book a call” form. We are the data controller for this information.
• Clinic staff and dashboard users — people at a Clinic who configure or manage their Afterglow account. We are the data controller for this information.
• Patients texting or calling a Clinic's number — when a patient messages or calls a phone number that a Clinic has connected to Afterglow, we process that conversation data on behalf of the Clinic, as a data processor/service provider. The Clinic controls that relationship, including what consent it has obtained from its patients and how long it wants that data kept. If you are a patient and have a privacy question about a specific clinic's use of Afterglow, the clinic itself is your first point of contact — we will also do our best to help if you reach us directly.

3. Information we collect

From website visitors

• Information you submit through the “Book a call” form: name, email address, clinic name, and any message you include.
• Basic technical data such as IP address, browser type, device type, and pages visited, collected automatically through standard web server and hosting logs.
• If you use the live chat demo on this site, the messages you send to try it out.

From Clinic accounts

• Clinic name, contact and escalation details, business hours, pricing and treatment information, booking link, and messaging preferences entered when setting up the Service.
• Billing and account information needed to provide the Service.

From patients, on a Clinic's behalf

• The phone number a patient texts or calls from.
• The content of SMS messages and call events (e.g. missed call, call status) exchanged with the Clinic's connected number.
• Conversation history and metadata used to maintain context across a conversation (e.g. what was previously discussed, whether a booking link was sent).
• For Clinics that opt into win-back/reactivation campaigns, the patient list the Clinic uploads (typically name, phone number, and last-visit information) for the purpose of sending re-engagement texts.

4. How we use information

• To operate the Service: answering patient texts and calls, looking up Clinic-specific pricing/FAQ information, generating AI replies, sending booking links, and logging conversations so a reply can account for earlier context.
• To notify Clinic staff in real time (by SMS or email) when a booking link is sent, a patient asks for a human, or another event the Clinic has configured requires attention.
• To respond to leads submitted through the website and follow up about a potential Clinic partnership.
• To run scheduled, Clinic-approved win-back texts to past patients who haven't booked in a while.
• To maintain, secure, debug, and improve the Service, including understanding aggregate usage patterns.
• To comply with legal obligations and enforce our Terms of Service.

We do not use patient conversation data to train third-party foundation models, and we do not sell personal information.

5. Text messaging (SMS) program

Because the core of the Service is SMS, this section applies specifically to text messages sent and received through Afterglow:

• Consent. A patient's phone number enters an Afterglow-connected conversation because they first texted or called the Clinic's number, or because the Clinic has an existing patient relationship and has represented to us that it has the right to text that number for the purposes described in these terms (e.g. reactivation/win-back campaigns to past patients). Clinics are responsible for obtaining and documenting proper consent from their own patients.
• Message frequency varies depending on the conversation and, for reactivation campaigns, the Clinic's configured schedule.
• Message and data rates may apply, as charged by the recipient's mobile carrier.
• Opt-out. A patient can reply STOP at any time to a Clinic's number to stop receiving texts from that Clinic through Afterglow. This is honored automatically and immediately by the system.
• Help. A patient can reply HELP for assistance, or contact the Clinic directly.
• Opt-in status and phone numbers collected for this messaging program are not shared with third parties for their own independent marketing purposes.
• Carriers are not liable for delayed or undelivered messages.

6. How we share information

We share information with a limited set of infrastructure providers (“subprocessors”) strictly to operate the Service, under their own applicable terms and security commitments:

We may also share information: with the Clinic a patient is texting, since that Clinic is the intended recipient of the conversation; to comply with a legal obligation, court order, or lawful request; to protect the rights, safety, or property of Vireon Labs Solutions, our Clients, or others; or in connection with a merger, acquisition, or sale of assets, with notice where required.

We do not sell personal information, and we do not share patient phone numbers or conversation content with data brokers or advertisers.

7. Data retention

We retain website lead information for as long as reasonably needed to respond to the inquiry and for our own business records, or until you ask us to delete it. Conversation data and Clinic configuration data are retained for as long as the Clinic maintains an active account, plus a reasonable period afterward for backups, legal, and accounting purposes, unless the Clinic requests earlier deletion of specific records and we are able to do so consistent with our own obligations.

8. Security

We use industry-standard safeguards, including encryption in transit, access-controlled cloud infrastructure, and row-level security on our database tables, to protect information against unauthorized access, alteration, or disclosure. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Your rights and choices

Depending on where you're located, you may have rights to access, correct, delete, or receive a copy of your personal information, or to object to or restrict certain processing. To exercise any of these rights:

• Website visitors / leads: email us at support@tryafterglow.pro.
• Patients: reply STOP to stop receiving texts, or contact the Clinic directly — they control your record. You're also welcome to email us and we'll route your request to the relevant Clinic.
• Clinics: manage most of your own configuration data directly, or email us for anything else.

We will respond to verifiable requests within a reasonable time and consistent with applicable law.

10. Health-related information

Afterglow answers general pricing, scheduling, and pre/post-care questions using information the Clinic provides — it is not a medical device and does not provide medical advice or diagnosis. We do not design the Service to collect Protected Health Information (PHI) as defined under HIPAA, and it should not be used to transmit PHI unless a separate written agreement (including a Business Associate Agreement, if applicable) is in place between the Clinic and us. Clinics are responsible for ensuring their use of the Service, and the information they choose to expose through it, complies with healthcare privacy laws that apply to them.

11. Children's privacy

The Service is intended for use by adults and by Clinics communicating with their adult patients. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

12. International data transfers

We operate from Malaysia and work with subprocessors located in other countries, including the United States. This means information may be transferred to, stored, and processed in countries other than the one in which it was collected. Where required, we rely on appropriate safeguards for these transfers. By using the Service, you understand that your information may be processed outside your home country.

13. Cookies and analytics

This website may use essential cookies and similar technologies required for the site and live chat demo to function, and basic, privacy-respecting analytics to understand aggregate traffic. We do not use third-party advertising cookies.

14. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll update the effective date above and, where appropriate, notify Clinics directly. Continued use of the Service after changes take effect means you accept the revised policy.

15. Contact us

Questions, requests, or concerns about this policy or your information? Email support@tryafterglow.pro.

Business address: Taman Ipoh Baru, Malaysia
Founder: Roshen Perumal