Privacy Policy — VaidyaHQ | Digital Prescription & Clinic EMR Platform

1. Our Uncompromising Zero Data Monetization Pledge

At VaidyaHQ, our business model is built exclusively around software licensing fees paid directly by doctors and healthcare practices. We enforce a strict Zero Data Monetization policy:

We NEVER sell, rent, monetize, license, or trade patient records, clinical notes, doctor identity, or prescription patterns to pharmaceutical manufacturers, third-party advertising networks, insurers, clinical research organizations, or commercial data brokers. Your clinical data remains exclusively yours and your patients'.

2. Regulatory Framework: DPDP Act 2023 Architecture

Under India's Digital Personal Data Protection (DPDP) Act, 2023:

Data Fiduciary: The attending medical practitioner and registered clinic act as the legal Data Fiduciary, maintaining full custodianship over patient health data and consent.
Data Processor: VaidyaHQ acts solely as a designated Data Processor, handling data strictly in accordance with documented instructions from the registered clinic to format prescriptions, securely store electronic health records, and deliver records to patients.

3. Information Collected & Processing Scope

Practitioner Credentials: Doctor legal name, medical registration number (MCI/NMC/State Medical Council), degrees, clinic address, and contact email.
Patient Clinical Records: Patient name, age, biological sex, contact mobile number, recorded vitals (BP, pulse, SpO2, BMI), clinical diagnosis notes, and prescribed dosage schedules input during consultation.
Operational Telemetry: Anonymized application performance metrics, error traces, and API response logs to ensure high platform stability and security.

4. Infrastructure, Localization & Encryption Standards

To comply with Indian health data localization norms:

Data Localization: All core databases, backup vaults, and document stores are hosted securely in Mumbai Region (India). Patient records never leave Indian sovereign territory.
Encryption in Transit: All HTTP traffic and API communications are enforced with TLS 1.3 cryptography.
Encryption at Rest: Patient health records and database volumes are safeguarded with hardware-accelerated AES-256 cryptographic standards.

5. WhatsApp Prescription Dispatch & Doctor Phone Shield

When a doctor opts to transmit an e-prescription to a patient via WhatsApp:

The prescription PDF is rendered and securely relayed through VaidyaHQ's verified system WhatsApp business channel.
Doctor Privacy Shield: The doctor's personal mobile number is never exposed to the patient, protecting practitioners against late-night calls and unsolicited messages.
The transmission payload contains only the patient-consented prescription PDF generated during that specific clinical encounter.

6. Data Portability & Clinic Deletion Rights

Clinics maintain complete data autonomy. At any point, administrators may request a full export of their clinic records in standard formats (CSV patient directory and signed PDF prescriptions) or request permanent cryptographic erasure upon clinic closure by emailing our desk.

7. Data Protection & Privacy Inquiries

For all privacy, DPDP compliance, data correction, or deletion inquiries, please reach out directly to our dedicated contact desk:

Email: contact@vaidyahq.in

Operating Location: Bengaluru, Karnataka, India