Privacy Policy

Last updated: May 29, 2026

1. Introduction

This Privacy Policy explains how Doctor Assistant (“we”, “our”, or “the platform”) collects, uses, stores, and protects personal and health-related information when clinics, doctors, receptionists, and patients use the platform.

By using the platform, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Patient Information

  • Name
  • Phone number
  • Date of birth and age
  • Gender
  • Address
  • Medical conditions and allergies
  • Prescription and visit history
  • Appointment details

Clinic and Staff Information

  • Doctor and staff names
  • Email addresses
  • Phone numbers
  • Medical registration details
  • Clinic branding and operational settings

Technical Information

  • IP address
  • Browser and device information
  • Usage analytics
  • Error logs and audit records

3. How We Use Information

  • Manage appointments and queue systems
  • Generate and store prescriptions
  • Send WhatsApp confirmations and reminders
  • Maintain patient medical records
  • Improve platform reliability and performance
  • Ensure security, fraud prevention, and auditing
  • Comply with legal and regulatory obligations

4. WhatsApp Communication

The platform uses the Meta WhatsApp Cloud API to send appointment confirmations, reminders, queue updates, and prescription links.

By initiating communication through WhatsApp, patients consent to receiving operational healthcare-related messages from the clinic.

5. Data Storage and Security

We implement reasonable technical and organizational safeguards to protect sensitive medical and personal information.

  • Encrypted HTTPS communication
  • Role-based staff access controls
  • Audit logging for sensitive actions
  • Secure cloud infrastructure and backups
  • Restricted access to patient records

6. Data Retention

Medical records, prescriptions, and visit history may be retained for the minimum duration required under applicable Indian medical and legal regulations.

Certain clinical records may not be permanently deleted even after a deletion request where retention obligations apply.

7. Patient Rights

Subject to applicable law, patients may request:

  • Access to their stored data
  • Correction of inaccurate information
  • Deletion requests where legally permitted
  • Withdrawal of consent for communications

8. Third-Party Services

The platform may use trusted third-party providers for hosting, analytics, messaging, storage, authentication, and monitoring.

These providers only process information necessary to provide their respective services.

9. Compliance

We aim to comply with applicable Indian healthcare and data protection regulations, including the Digital Personal Data Protection Act (DPDP Act), 2023.

10. Changes to This Policy

We may update this Privacy Policy periodically. Continued use of the platform after updates constitutes acceptance of the revised policy.

11. Contact

For privacy-related questions or requests, please contact your clinic administrator or the platform operator.