Privacy Policy

Last updated: [DATE]

[LEGAL BUSINESS NAME] ("we") operates MedComply. This policy explains what personal data we process and why, in line with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

Data we collect

• Account data: name, email, password (stored only as a secure hash), account type, and optional qualification, registration number, specialty and city.
• Content you submit: text, captions and scripts you check; links you scan; content plans and calendar entries you save.
• Uploaded files (images, videos, PDFs) are processed to produce your report and are not stored. Video frames are extracted on your device.
• Scan results: public profile information and post captions of the profiles you scan, our findings, and small thumbnail images, saved in your reports.
• Payments: order and payment IDs and amounts. Card, UPI and bank details are handled by Razorpay and never reach us.
• Technical data: IP address and a session cookie used to keep you logged in and protect against abuse.

How we use it

To provide the compliance checks, scans, plans and calendar; to process payments; to secure the Service; and to contact you about your account. We do not sell your data or use it for advertising.

Processors we share data with

• Anthropic (AI analysis): content you submit for review is sent to Anthropic's API for processing.
• Razorpay (payments).
• [DATABASE / HOSTING PROVIDER, e.g. Neon and Render] (storage and hosting).
• Apify / Meta / Google (to fetch public profile data when you request a scan).
• [EMAIL PROVIDER, e.g. Resend] (password reset emails).

Some processors may handle data outside India under appropriate safeguards.

Patient data

Do not upload identifiable patient information. If content you check contains it, you confirm you have the patient's valid consent and a lawful basis.

Retention

We keep your account data and saved reports until you delete them or your account. Payment records are kept for [8] years as required by tax law.

Your rights

You can access and correct your data in Account settings, export reports as CSV, and delete your account (which erases your content) at any time. To exercise other rights or raise a grievance, contact our Grievance Officer: [NAME], [EMAIL], [ADDRESS]. We respond within [30] days.

Cookies

We use one essential cookie to keep you logged in. We do not use advertising or tracking cookies.

Contact

[LEGAL BUSINESS NAME], [REGISTERED ADDRESS]. Email: [SUPPORT EMAIL]