Operator
MediBrave CMS is a software product operated by Digital Hive Hub, a sole proprietorship registered in Malaysia. This policy explains how information is handled on the public website and in the MediBrave application.
Last updated: 22-08-2026.
Scope
This policy separately covers: (1) visitors to the public MediBrave website and pre-sales contacts, and (2) clinics that use the MediBrave application. Clinic data processed through the application is handled under the applicable customer terms as well as this policy.
Clinic and customer responsibilities
Clinics decide what patient and clinic data is entered into the MediBrave application and are responsible for lawful collection, consent, notices, and use of that data, including compliance with applicable law. Clinics must not submit patient data or other sensitive medical information through the public marketing website or pre-sales enquiries.
Information we receive
Website visitors and pre-sales contacts: if you contact us by email, phone, or WhatsApp, we may receive your name, organisation details, contact details, and the contents of your enquiry. Standard website hosting and server logs may record technical information such as browser, device, IP address, and access timestamps. Google Analytics collects aggregate usage information such as visited pages, traffic sources, device type, approximate location, and interactions with public calls to action.
Application and clinic data: when a clinic uses the MediBrave application, account details (such as clinic name and billing contact) and clinic-entered operational data (including patient records, appointments, consultations, pharmacy, billing, and related records) are processed to provide the service. Payment processing is handled by Stripe; MediBrave does not store card numbers directly.
How we use information
We use website and enquiry information to respond to enquiries, arrange demos, discuss commercial fit, improve the website, and operate MediBrave responsibly. We use application data to provide, secure, and operate the service for the clinic, including appointment, billing, pharmacy, reporting, and related workflows, and to meet legal and security obligations.
Cookies and Google Analytics
The public website uses Google Analytics to understand aggregate usage. Google Analytics sets the following cookies:
| Cookie | Purpose | Duration | How to opt out |
|---|---|---|---|
| _ga | Google Analytics - distinguishes users | Up to 2 years | GA opt-out browser add-on or block third-party cookies |
| _ga_<container-id> | Google Analytics - session state | Up to 2 years | Same as _ga |
The website does not use advertising or cross-site tracking cookies at this time. The website does not currently respond to browser “Do Not Track” signals because no uniform standard exists.
Third-party providers
MediBrave uses service providers that process data to operate the website and application, including website hosting (Vercel), application hosting (Netlify and Contabo), database hosting (Supabase), email delivery (Resend), payments (Stripe), attachment storage (Cloudflare R2), and analytics (Google Analytics). Their own privacy policies apply to their processing. We share information only when reasonably necessary to operate the service, comply with law, or protect legitimate business interests.
Security
MediBrave applies verified operational controls including encrypted transport, access controls, role-based permissions, audit logging, and monitored infrastructure. No system is completely secure, and MediBrave does not make absolute security guarantees.
Retention and deletion
Website enquiry and analytics information is retained for as long as needed for those purposes or as required by law. Application data is retained for the clinic’s active subscription and any applicable post-subscription period described in the customer terms. Retention, access, export, and deletion after a subscription ends are handled in accordance with the customer terms, this policy, and applicable legal, regulatory, dispute, fraud, and security-preservation duties.
Privacy requests
Clinics can contact us to make privacy-related requests, such as access, correction, or deletion of data we hold about them. We will respond within a reasonable timeframe and may need to verify identity. Contact details are below.
International processing
Data may be processed in Malaysia and in the regions where our service providers operate. We rely on our providers’ processing terms and applicable legal mechanisms for any transfers.
Children
The MediBrave website and application are not directed to children and are intended for use by clinics and healthcare professionals. We do not knowingly collect information from children through the public website.
Artificial intelligence
AI-assisted features are not currently advertised as included. If and when AI assistance is activated, this policy will be updated to identify the active providers, how data is processed, retention, and any model-training treatment before the feature is promoted.
Changes
MediBrave may update this policy from time to time. Material changes will be posted with a new “last updated” date.
Contact
For privacy-related questions, email [email protected] or WhatsApp +60 12-358 1811.