Privacy Policy

1. Introduction

Doccliniq ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our telemedicine platform ("Platform").

This Privacy Policy is compliant with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 of India.

We do not offer services outside India for users on this Platform. Personal data is primarily stored and processed in India. By using the Platform or providing information, you agree to this Privacy Policy and our Terms of Use.

2. Information We Collect

2.1 Personal Information

When you register and use our Platform, we collect:

• Identity Information: Name, date of birth, gender, profile photograph
• Contact Information: Email address, phone number, postal address
• Account Information: Username, password (encrypted), account preferences
• Payment Information: Transaction references and payment status (card, UPI, and bank details are collected and stored by Cashfree Payment Gateway; we do not store full card numbers or UPI PINs on our servers)

2.2 Health Information (Sensitive Personal Data)

As a healthcare platform, we collect sensitive health information including:

• Medical history and symptoms
• Consultation notes and records
• Prescriptions and medication information
• Diagnostic reports and test results (if uploaded)
• Vital signs and health metrics (if provided)
• Consultation recordings (if consented to)

2.3 Professional Information (For Doctors)

For registered healthcare professionals, we collect:

• Medical qualifications and degrees
• License numbers and registration details
• Specialization and experience
• Professional certifications
• Hospital/clinic affiliations

2.4 Technical Information

We automatically collect:

• Device information (device type, operating system, browser)
• IP address and location data
• Usage data (pages visited, features used, time spent)
• Cookies and similar tracking technologies
• Log files and error reports

3. How We Use Your Information

We use collected information for:

• Service Delivery: Facilitating consultations, managing appointments, processing prescriptions
• Account Management: Creating and maintaining your account, verifying identity
• Payment Processing: Processing consultation fees through Cashfree Payment Gateway
• Communication: Sending appointment reminders, notifications, and important updates
• Medical Records: Maintaining your health records for continuity of care
• Platform Improvement: Analyzing usage patterns to improve our services
• Legal Compliance: Complying with applicable laws and regulations
• Security: Detecting and preventing fraud, abuse, and security threats

4. Information Sharing and Disclosure

4.1 With Healthcare Providers

Your health information is shared with the healthcare professionals you consult with, as necessary for providing medical services.

4.2 Third-Party Service Providers

We share information with trusted third-party service providers who assist in platform operations:

• Cashfree Payment Gateway: Payment processing (payment details handled per their privacy policy)
• Daily.co: Video/voice consultation infrastructure (consultation data)
• Stream Chat: Chat consultation services (chat messages)
• Google OAuth: Authentication services (if you use Google login)
• Email Service Providers: Sending notifications and communications
• Cloud Storage Providers: Secure data storage and backup

All third-party providers are contractually obligated to protect your information and use it solely for specified purposes.

4.3 Legal Requirements

We may disclose information when required by law, including:

• Court orders or legal processes
• Government requests or regulatory compliance
• Protecting rights, property, or safety of users or others
• Investigating fraud or security breaches

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: Data transmitted over the internet is encrypted using SSL/TLS
• Secure Storage: Health records stored in encrypted databases
• Access Controls: Role-based access to sensitive information
• Authentication: Secure password requirements and multi-factor authentication options
• Regular Audits: Security assessments and vulnerability testing
• Employee Training: Staff trained on data protection and privacy

However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and settings
• Maintain your login session
• Analyze platform usage and performance
• Provide personalized content

You can control cookies through your browser settings. However, disabling cookies may limit Platform functionality.

7. Data Retention

We retain your information for as long as necessary to:

• Provide our services
• Comply with legal obligations (medical records may need to be retained per Indian medical regulations)
• Resolve disputes and enforce agreements
• Maintain continuity of care

Medical records are typically retained for a minimum period as required by Indian medical regulations. Upon account deletion, we will delete or anonymize your information, except where retention is required by law.

8. Your Rights

Under Indian IT Rules and applicable data protection laws, you have the right to:

• Access: Request access to your personal and health information
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your information (subject to legal retention requirements)
• Withdrawal of Consent: Withdraw consent for data processing (may affect service availability)
• Data Portability: Request a copy of your data in a portable format
• Grievance: File complaints regarding data handling

To exercise these rights, contact us at Contact emailrushilventures@gmail.com or through our Grievance Policy.

Account deletion: You may request account deletion via your profile settings or by emailing us via Contact emailrushilventures@gmail.com. We may delay deletion if there are pending appointments, payments, or grievances. After deletion, you lose access to your account; we retain data only as required by law or for fraud prevention.

9. Children's Privacy

Our Platform is not intended for users under 18 years of age. We do not knowingly collect information from children. If you are a parent or guardian and believe your child has provided information to us, please contact us immediately.

10. International Data Transfers

Your information is primarily stored and processed in India. Some third-party services (such as Daily.co, Stream Chat) may process data outside India. We ensure appropriate safeguards are in place for such transfers.

11. Changes to Privacy Policy

We may update this Privacy Policy periodically. Material changes will be notified via email or Platform notification. Continued use of the Platform after changes constitutes acceptance of the updated Privacy Policy.

12. Grievance Officer

As required under Indian IT Rules, we have appointed a Grievance Officer. For privacy-related concerns:

Grievance Officer: Rushil Deshwal
Email: Contact emailrushilventures@gmail.com
Response time: Within 30 days

For detailed grievance procedures, see our Contact and Grievance Policy.

13. Contact Us

For questions about this Privacy Policy or our data practices:

Email: Contact emailrushilventures@gmail.com
Support: Contact emailrushilventures@gmail.com