Privacy policy

Last updated: 15 October 2026

This policy explains how , trading as ("we"), handles personal data on this website and in (the "Service").

1. Two kinds of data

Your account data — we are responsible for it. When you sign up, ask for a demo or pay, we collect your name, business name, email, mobile number, city, number of locations, your payment references (UPI transaction numbers) and the invoices we issue you. We use it to create and run your account, contact you about the Service, bill you and meet tax law.

Data your business keeps in the Service — your business is responsible for it. Your clients' and patients' records, appointments, bills, photos, consent forms and staff records belong to your business. Under India's Digital Personal Data Protection Act, 2023 your business is the data fiduciary for that data and we are its data processor, bound by the data-processing agreement in Schedule A of our terms. If you are a client or patient of a business that uses the Service, please contact that business about your data — or use the Privacy tab in its patient portal. We will help the business respond.

2. Where data is stored

On servers in India (Hostinger), with backups kept in India too. Each business's data is kept separate from every other business's.

3. Security

Individual logins with role-based access; passwords stored hashed; limits on repeated failed sign-ins; encrypted connections (HTTPS); integration keys stored encrypted; activity logs kept for at least a year; automatic backups. If a breach affects your data we will tell you, and the Data Protection Board, as the law requires.

4. Sharing

Only with providers we need to run the Service — hosting (Hostinger), secure delivery (Cloudflare), WhatsApp messaging when a business connects it (Meta), email delivery, and payment processing — under confidentiality, or when the law requires. We do not sell personal data or use it for advertising.

5. How long we keep it

• Account data: while your account is open, then up to 90 days so you can come back or download your data, then deleted.
• Invoices and payment records: as long as tax and accounting law requires (up to 8 years).
• Activity logs: at least one year.
• Backups: copies expire within a further 90 days.

6. Your rights

You may ask us for a summary of your account data, to correct or erase it (except what the law makes us keep), to withdraw consent for marketing, to nominate someone to act for you, and to complain. We reply within 90 days, usually much sooner. If you are not satisfied, you may complain to the Data Protection Board of India.

7. Cookies

This website uses no advertising or tracking cookies. The app stores your sign-in and screen settings in your browser so it keeps working on a weak connection.

8. Contact / grievance officer

, Grievance Officer, TechHub Digital · ·