Privacy Policy

1. Our Core Commitment to Data Privacy

At VaidyaHQ, we operate on a strict Zero Data Monetization policy. We generate revenue exclusively from software subscription fees paid by clinics and doctors. We never sell, rent, license, or trade patient health data, clinical prescriptions, or doctor records to pharmaceutical companies, diagnostic networks, advertisers, or third-party data brokers.

2. Information We Collect

• Doctor & Clinic Credentials: Doctor name, medical registration number (MCI/NMC), qualifications, clinic address, and contact email.
• Patient Clinical Records: Patient name, age, gender, vital signs, chief complaints, diagnosis notes, and prescribed medications entered by the attending doctor.
• System Logs: Anonymized usage telemetry, screen resolution, and API response logs to maintain service uptime.

3. Data Ownership & Export Rights

The doctor/clinic retains 100% ownership of all patient records and prescription history created within VaidyaHQ. You have the right to export your complete patient database in standard CSV and PDF formats at any time without restriction or penalty.

4. Data Security & Encryption Standards

All data transmitted to and from VaidyaHQ is encrypted using TLS 1.3 protocol. Data at rest is encrypted using AES-256 standards in AWS/Postgres Mumbai (`ap-south-1`) data centers compliant with Indian health data localization norms.

5. WhatsApp Integration & Privacy Shield

When a doctor dispatches a prescription via WhatsApp, the PDF is generated and routed through VaidyaHQ's verified system handle. Doctor personal mobile numbers remain shielded, preventing unsolicited patient messages.

6. Contact Privacy Officer

For privacy inquiries or data deletion requests, contact our Data Protection Officer at: privacy@vaidyahq.in.