Privacy Policy

MedPrax (“we”, “us”) provides MedPrax OPD, a clinic management service used by doctors and clinics (“Clinics”). This policy explains how we handle personal data, consistent with India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

Our role

For patient records entered by a Clinic, the Clinic is the Data Fiduciary and MedPrax acts as its Data Processor. We process patient data only to provide the service to that Clinic and on its instructions. For account information of doctors and staff (name, email, phone), MedPrax is the Data Fiduciary.

What we collect

• Account data: name, email, phone number, clinic details and login information.
• Clinical data entered by Clinics: patient demographics, contact numbers, vitals, complaints, diagnoses, prescriptions and billing records.
• Booking requests: name, phone number and preferred date submitted by patients on a Clinic's booking page.
• Usage data: basic technical logs needed to keep the service secure and working.

Where data is stored

Data is stored on Google Cloud (Firebase) in the Mumbai, India region (asia-south1), encrypted in transit (TLS) and at rest. Access to a Clinic's records is limited to users that Clinic has invited.

How we use data

• To provide, maintain and secure the service.
• To provide support and send service-related messages.
• To process payments for subscriptions (via our payment processor, Razorpay).

We do not sell personal data, and we do not use patient data for advertising.

Sharing

We share data only with sub-processors needed to run the service (Google Cloud/Firebase for hosting and authentication, Razorpay for payments, Amazon Web Services for payment processing infrastructure), or when required by law.

Retention and deletion

Clinic data is retained while the account is active. A Clinic may export its data at any time and may request deletion by writing to hello@medprax.in. Medical records may need to be retained by the Clinic for periods required under applicable medical regulations.

Your rights

You may request access, correction or erasure of your personal data, and may withdraw consent, by writing to hello@medprax.in. Patients should first contact the Clinic that holds their records.

Grievance officer

For any concern about your data, contact our Grievance Officer at hello@medprax.in. We will acknowledge within 48 hours and aim to resolve within 30 days.