PRIVACY · TERMS · SECURITY

CriptoSalud Privacy Policy and Terms of Use.

This notice describes data processing and the operating terms of the medical-tourism coordination pilot. It must remain aligned with contracts and undergo Costa Rican legal review before materially expanding payments, countries, or data categories.

Effective August 8, 2026 · privacy-2026-08-08-v1

Privacy Policy

CriptoSalud applies data minimization: public forms and administrative portals must not be used to send diagnoses, medical records, medical images, or detailed clinical information.

Controller and contact

The operational controller is José Pablo Morales del Valle, operator of CriptoSalud Costa Rica, with an operating address in Cartago, Costa Rica. Personal-data requests are received at info@criptosaludcr.com.

Data processed

We may process name, email, telephone, country, language, general service category, approximate date, account and session data, administrative conversations, professional profiles and credentials, declared care locations, quotations, acceptances, payments, and technical security records. We do not request seed phrases, private keys, or complete card details.

Purposes

Data is used to answer requests, administer accounts, review professionals, confirm availability and care locations, prepare and version quotations, facilitate authorized payments, provide support, prevent abuse, maintain traceability, and meet applicable obligations. It is not used for diagnosis, clinical decisions, or advertising based on health information.

Consent and required data

Before a request is submitted, the required data and purposes are disclosed. The public patient request and separate case consent are recorded with the date, version, and accepted-text fingerprint; chat consent is recorded with the date and version. Without required fields, the request cannot be processed. Consent may be withdrawn for future uses by email without invalidating prior lawful processing or records that must be retained.

Recipients and processors

Internal access is limited to authorized coordination. Depending on the feature, OpenAI Sites and Cloudflare provide hosting, Supabase authentication, Resend transactional email, ONVO enabled payments, Telegram administrative alerts without inquiry content, and Google Analytics public-page measurement only. For new records, proposed professionals and facilities receive administrative data only after the patient's separate portal consent; already-assigned legacy cases may retain that assignment under controlled access.

International processing

Some technology processors may process or store data outside Costa Rica, including the United States and other jurisdictions where they operate. Data is limited to the contracted service and available contractual and technical controls are applied. Form consent includes the international processing described here.

Retention

We retain data only as long as necessary. Planned criteria include reviewing inactive inquiries after 12 months; chat is configured to expire after 180 days of inactivity; account data is retained while the account is active; and case, quotation, acceptance, and financial records may be retained for up to five years or a longer period required for obligations, disputes, or audit. Deletion or anonymization is assessed when the purpose ends or upon a valid request, subject to applicable retention duties.

Individual rights

You may request access, correction, updating, deletion, and withdrawal of consent at no charge by writing from the email linked to the account. CriptoSalud will verify identity and seek to respond within five business days where that period applies. You may also contact Costa Rica's data-protection authority, PRODHAB.

Security and analytics

Access surfaces use protected sessions, are not cached, block third-party framing, and do not load Google Analytics. On public pages, Analytics receives only the path without query parameters. We apply origin checks, size limits, validation, audit records, and private storage where appropriate; no system eliminates all risk.

Minors and changes

A request must be submitted by an adult or the patient's authorized representative. Material changes are published with a new date and version; when a change affects consent scope, a new acceptance will be requested.

Terms of Use

By using the website, you accept these terms for administrative coordination of planned private care in Costa Rica.

Nature of the service

CriptoSalud promotes and coordinates medical tourism. It is not a clinic, hospital, insurer, emergency service, diagnosis provider, or substitute for a professional-patient relationship.

Clinical responsibility

Each independent professional determines eligibility, diagnosis, preparation, clinical consent, treatment, records, and follow-up. The facility retains its institutional responsibilities. Documentary profile review does not guarantee outcomes or constitute clinical certification.

Requests and quotations

A request does not guarantee availability or a reservation. Before payment, the final quotation must identify the professional, care location, beneficiary of each item, scope, inclusions, exclusions, pending items, amount, currency, foreseeable taxes and charges, validity, cancellation, and refund. Only the exact accepted version may proceed to payment.

Payments, cancellations, and refunds

The charging party and method are identified in each quotation. Card, bank transfer, or USDC is enabled only where applicable. Cancellation and refund terms depend on the professional, facility, processor, and service and must be shown before payment. Mandatory consumer law prevails over incompatible terms.

Digital assets and SALUD

BTC, ETH, BNB, and SOL are approximate informational USD references based on market pairs and do not imply acceptance. USDC is optional when authorized by a quotation; CriptoSalud does not request private keys or custody assets. SALUD is in development, has no quoted price, and is unavailable for purchase, payment, or investment.

Travel, insurance, and third parties

CriptoSalud does not guarantee visas, flights, lodging, transportation, insurance coverage, or insurer reimbursement. It initially operates on a direct-payment basis and does not file claims. Third-party services retain their own terms.

Acceptable use and availability

Do not use the site for emergencies, unlawful content, impersonation, credential abuse, automated extraction, technical interference, or prohibited clinical or financial information. Pilot features may be changed, suspended, or limited for security, maintenance, or compliance.

Emergencies, law, and contact

For an emergency in Costa Rica, call 9-1-1 or attend the appropriate service. These terms are interpreted under applicable Costa Rican law without limiting mandatory rights. Administrative questions and complaints: info@criptosaludcr.com.

Official reference sources

Law No. 8968 ↗Regulation No. 37554-JP ↗PRODHAB frequently asked questions ↗