Privacy Policy

1. Introduction

Welcome to Dr. Manasa Shivaram's website. This Privacy Policy describes how Dr. Manasa Shivaram ("we", "us", or "our"), operated through the software platform provided by Shuddi Technologies Private Limited ("Platform Provider"), collects, uses, stores, and protects your personal information when you use our services or visit our website.

By accessing or using our services, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of our services.

2. Information We Collect

We collect the following categories of personal information:

• Identity Information: Full name, date of birth, gender, and government ID details where required.
• Contact Information: Email address, phone number, and postal address.
• Medical Information: Health history, symptoms, prescriptions, and consultation records shared with us for the purpose of medical services.
• Payment Information: Transaction details processed through Razorpay. We do not store your card/bank credentials — these are handled exclusively by Razorpay's PCI-DSS compliant infrastructure.
• Technical Data: IP address, browser type, device identifiers, cookies, and usage data collected automatically when you visit our website.

3. How We Use Your Information

Your information is used to:

• Schedule and manage appointments and consultations.
• Provide medical advice, treatment, and follow-up care.
• Process payments for services through Razorpay via Shuddi Technologies Private Limited.
• Send appointment reminders, health tips, and service-related communications.
• Comply with applicable laws, regulations, and legal obligations.
• Improve our website and service quality through analytics.

4. Google API Services

Our platform integrates with Google Calendar API to create video consultation appointments. This section explains exactly what Google data we access and why.

What we access

• Google Account email address — used solely to identify which Google account the doctor has connected and to add the doctor as a calendar event attendee.
• Google Calendar (create events only) — we create calendar events on the doctor's primary calendar when an online consultation booking is confirmed. Each event includes a Google Meet link and invites the patient as an attendee.

What we do NOT access

• We do not read, modify, or delete any existing calendar events.
• We do not access Google Drive, Gmail, Contacts, or any other Google service.
• We do not use Google data for advertising, marketing, or profiling purposes.
• We do not share Google user data with third parties except as necessary to operate the service (e.g., creating the calendar event with the patient's email as an attendee).

Limited Use Disclosure

DoctorsHub's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used exclusively for the purpose of scheduling online consultations and generating Google Meet links. It is not used to develop, improve, or train generalised AI/ML models.

Token storage and revocation

OAuth refresh tokens are stored securely in our database with encryption at rest, provided by Supabase. Doctors can disconnect Google Calendar at any time from Settings → Google Calendar → Disconnect, or by revoking access directly at myaccount.google.com/permissions. Upon revocation, we delete the stored token from our database.

5. Sharing of Information

We do not sell your personal data. We may share your information with:

• Shuddi Technologies Private Limited: Our software service provider who operates and maintains the digital platform used to deliver our services. They process your data strictly as a data processor on our behalf, under contractual obligations of confidentiality.
• Razorpay Software Private Limited: Our payment gateway partner who processes all online transactions. Razorpay's privacy policy governs how they handle your payment data. Visit razorpay.com/privacy for details.
• Healthcare Professionals: Other treating doctors or specialists when required for your care, with your consent.
• Legal Authorities: When required by law, court order, or government regulation.

6. Data Retention

Medical records and associated personal data are retained for a minimum of 7 years from the date of last consultation, as required under applicable Indian healthcare regulations and the Information Technology (Amendment) Act, 2008. Payment records are retained as required by applicable financial and tax laws.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Payment data is secured through Razorpay's PCI-DSS Level 1 compliant infrastructure. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Cookies and Tracking

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze traffic, and personalize content. You may control cookie settings through your browser. Disabling cookies may limit some functionality of the website.

9. Your Rights

Under applicable Indian data protection laws and the Digital Personal Data Protection Act, 2023 (DPDP Act), you have the right to:

• Access a copy of the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data, subject to legal obligations.
• Withdraw consent for non-essential data processing at any time.
• Lodge a complaint with the Data Protection Board of India.

To exercise these rights, contact us at +919741823963.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third-party sites you visit.

11. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Changes will be posted on this page with an updated effective date. Continued use of our services after changes constitutes acceptance of the revised policy.

12. Contact Us

For privacy-related queries or grievances, please contact: