Privacy Policy

1. About Us

This Privacy Policy applies to services provided by Medomeet Healthtech Private Limited (CIN: U82990HR2026PTC144258, GSTIN: 06AAUCM7835J1ZQ), registered at 957/14, Gali No. 8, Amargarh Gamri, Kaithal, Haryana – 136027, India (hereinafter “Medomeet”, “we”, “our”, or “us”).

We operate the platform medomeet.com (“Platform”), which enables patients to discover doctors, book OPD appointments, and communicate with clinics via WhatsApp and web interfaces.

2. Information We Collect

2.1 Information you provide

• Name, mobile number, and email address when you register or book an appointment
• Date of birth, gender, and address for patient records
• Presenting health complaint or reason for visit (entered at booking)
• ABHA (Ayushman Bharat Health Account) ID if voluntarily provided
• Documents uploaded (lab reports, prescriptions, X-rays)
• Guardian information for patients under 18 years of age

2.2 Information collected automatically

• Device type, browser, and IP address
• Pages visited and features used on the Platform
• Appointment history and queue position data

2.3 Information received via WhatsApp

If you interact with our WhatsApp chatbot (+919876543211 or hospital-specific numbers), we collect your WhatsApp phone number, the messages you send (name, complaint, preferred doctor, appointment date), and your consent confirmation. WhatsApp conversations are processed through Meta’s WhatsApp Business API in accordance with Meta’s Privacy Policy.

3. How We Use Your Information

• To create and manage your patient profile and appointment records
• To send appointment confirmations, queue updates, and reminders via WhatsApp, SMS, or push notifications
• To share your appointment details (name, token number, complaint) with the clinic/doctor you are visiting
• To enable doctors to access your health history during consultations
• To improve our Platform, fix bugs, and develop new features
• To comply with applicable laws, including the Digital Personal Data Protection (DPDP) Act, 2023

We do not sell, rent, or share your personal or health data with advertisers, data brokers, or any third party for commercial purposes.

4. WhatsApp Integration

Our Platform integrates with the WhatsApp Business API provided by Meta Platforms, Inc. When you message our WhatsApp number:

• Your phone number and message content are transmitted to and processed on our servers hosted in India (Oracle Cloud, ap-mumbai-1 region)
• We store your WhatsApp phone number in encrypted form only
• We send appointment-related messages only — we do not send unsolicited marketing messages
• You may opt out at any time by sending “STOP” to our WhatsApp number

Use of WhatsApp is subject to WhatsApp’s Terms of Service and Privacy Policy.

5. Data Sharing

We share your data only with:

• Clinics and doctors on our Platform — limited to the information needed for your appointment (name, token number, complaint, documents you have uploaded)
• Cloud infrastructure providers — Supabase (PostgreSQL, data stored in Singapore), Oracle Cloud India (Mumbai), and Cloudflare (CDN only, no personal data stored)
• Meta Platforms — only via WhatsApp Business API as described in Section 4
• Government authorities — only when required by law or a valid legal order

6. Sensitive Personal Data (Health Information)

Health information (presenting complaint, diagnoses, prescriptions, lab reports) is classified as sensitive personal data under the DPDP Act, 2023 and applicable Indian laws. We:

• Store health data in encrypted form at rest and in transit
• Restrict access to health records strictly to the relevant clinic staff and doctors
• Do not use health data for advertising or profiling purposes
• Obtain explicit consent before processing health data

7. Data Retention

We retain your personal data for as long as your account is active or as required to provide services. Medical records may be retained for up to 7 years as required under applicable Indian healthcare regulations. You may request deletion of your account and associated data by contacting us (see Section 10).

8. Your Rights (DPDP Act, 2023)

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request erasure of your data (subject to legal retention requirements)
• Withdraw consent at any time
• Nominate a representative to exercise your rights
• File a complaint with the Data Protection Board of India

To exercise any of these rights, email us at [email protected].

9. Cookies and Tracking

We use essential session cookies to keep you logged in. We also use Google Analytics (anonymised) and Google Tag Manager to understand Platform usage. You may disable non-essential cookies in your browser settings; this will not affect core functionality.

10. Security

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest for sensitive fields, row-level security in our database, and regular security audits. However, no system is completely secure; if you believe your data has been compromised, contact us immediately.

11. Minor Patients

Appointment bookings for patients under 18 years of age require a parent or legal guardian to provide consent and their contact details. We collect guardian information solely for compliance with the DPDP Act, 2023 (Section 9) and do not use it for any other purpose.

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or a prominent notice on the Platform at least 7 days before they take effect. Continued use of the Platform after the effective date constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related queries, requests, or complaints: