Clear boundaries for medspa marketing.

Patient data boundaries. Start with page and contact-path review. Do not request patient files, message histories, or protected health information unless a written owner-approved process and required vendor terms are in place.

Before-and-after imagery. Use only media the medspa owns, has permission to publish, and can support with the right releases and context. Do not imply typical results from a single image.

Outcome claims. Treatment results, revenue results, and timing promises need substantiation before publication. Consequential claims should go through a compliance reviewer.

Access needed. Begin with read-only or least-privilege account access whenever possible, document the purpose, and remove access when the work ends.

What Velara will not do. No unsupported medical claims, no patient-derived ad audiences, no scraped testimonials, no invented locations, and no live follow-up automation until the owner approves the destination systems.