Home › Privacy Policy

Privacy Policy

Learn how DoctorParcha collects, uses, stores, and protects your personal and medical data.

Introduction

DoctorParcha ("we", "our", or "us") is committed to protecting the privacy and security of your personal and medical information. This Privacy Policy explains how we collect, use, store, and safeguard your data when you use our clinic management platform, including our web application, APIs, and related services.

By using DoctorParcha, you agree to the collection and use of information as described in this policy. If you do not agree, please discontinue use of our services.

Information We Collect

For Clinic Administrators & Doctors

  1. Full name, professional registration number, email address, and mobile number
  2. Clinic name, address, city, GST number, and contact details
  3. Subscription and billing information (processed securely via Razorpay; we do not store card data)
  4. Platform usage data including login times, features accessed, and prescription activity

For Patients

  1. Name, age, gender, mobile number, and address
  2. Medical history, diagnoses, prescriptions, lab reports, and appointment records
  3. WhatsApp communication preferences
  4. Family member records linked to the primary patient account

Automatically Collected Data

  1. IP address, browser type, device type, and operating system
  2. Pages visited, time spent, and clickstream data for improving the platform
  3. Error logs and crash reports for technical diagnostics

How We Use Your Information

  1. Service Delivery: To provide clinic management, prescriptions, billing, and appointment features
  2. Communication: To send appointment reminders, prescription receipts, and account notifications via WhatsApp or email
  3. Billing & Payments: To process subscription fees and credit pack purchases through Razorpay
  4. Support: To respond to queries, resolve disputes, and provide technical assistance
  5. Analytics: To improve platform performance, detect fraud, and develop new features
  6. Legal Compliance: To meet obligations under Indian law, including the Information Technology Act, 2000

Data Storage & Security

Your data is stored on secured servers hosted in India. We implement industry-standard security measures including:

  1. 256-bit SSL/TLS encryption for all data in transit
  2. Encrypted databases for sensitive patient and medical records
  3. Role-based access control — clinic staff can only access data within their own clinic
  4. Regular security audits and vulnerability assessments
  5. Automated backups to prevent data loss

Payment transactions are handled exclusively by Razorpay, which is PCI-DSS compliant. We never store your card or UPI credentials on our servers.

Data Sharing

We do not sell, rent, or trade your personal information to third parties. We may share data only in the following circumstances:

  1. With Clinics: Patient data is shared with the clinic and doctor who generated or manages the records
  2. Service Providers: Razorpay (payments), cloud hosting providers, and SMS/WhatsApp gateway partners — all bound by confidentiality agreements
  3. Legal Obligation: If required by a court order, government authority, or applicable Indian law
  4. Business Transfer: In case of a merger or acquisition, user data may be transferred with prior notice

Patient Data & Medical Records

Medical records generated on DoctorParcha belong to the respective clinic and patient. We act as a data processor on behalf of clinics. Patients may request their records from the clinic at any time. We retain medical data as long as the clinic maintains an active account, or as required by applicable health regulations in India.

Cookies

We use session cookies to maintain your login state and preference cookies to remember theme and language settings. No third-party advertising cookies are used. You can disable cookies in your browser settings, though some features may not function correctly.

Your Rights

  1. Access: Request a copy of the data we hold about you
  2. Correction: Request correction of inaccurate or incomplete data
  3. Deletion: Request deletion of your data (subject to legal retention requirements)
  4. Portability: Request your data in a structured, machine-readable format

To exercise these rights, contact us at support@drparcha.com.

Children's Privacy

DoctorParcha is not directed at children under 13. We do not knowingly collect personal information from children independently. Pediatric patient records are created and managed by the consulting clinic and parent/guardian.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page and notify registered clinics via email. Continued use of the platform after changes constitutes acceptance of the updated policy.

Contact Us

For any privacy-related queries or concerns, please reach out to:

  1. Email: support@drparcha.com
  2. Address: DoctorParcha Technology Pvt. Ltd., India
Go Back