Privacy Policy

1. Who is responsible for your data

• When you book through Sehatsandhi, list a business with us, contact us or use our website, NG Technologies decides why and how your data is used — we are the "Data Fiduciary".
• When a clinic, hospital, lab or pharmacy uses our software to keep its patients' records, that business is the Data Fiduciary for those records and we are its "Data Processor": we store and process them only on its instructions and for its purposes. Requests about those records should go to that business; if you send them to us, we pass them on and help it respond.

2. What we collect and why

We collect only what each purpose needs:

• Booking a doctor or service (on WhatsApp or the website): your name, phone number, age, the family member you are booking for and their relation to you, the speciality or service you need, and your area or pincode — to find a suitable doctor or partner, make the booking, and send you the confirmation and reminders.
• Records a clinic keeps with our software (as its processor): visits, vital signs, allergies, diagnoses, examinations, prescriptions, lab tests and results, uploaded reports and documents, operations, admissions and discharge, bills, payments and medicines dispensed. If your clinic turns on voice notes, the audio of the consultation is converted to text so the doctor can check it; see section 4.
• Documents sent to you: when your clinic or lab asks, we send your prescription, bill, discharge summary or lab report as a secure link on WhatsApp, SMS or email.
• Ratings: if you reply to a rating request after a visit, we keep the score and any words you add.
• Ordering medicines (WhatsApp): your name, delivery address and PIN code, the medicines you ask for and, if you send it, a photo of your prescription. Every pharmacy that delivers to your PIN code sees only the area and the medicines. The first pharmacy to accept sees your prescription photo and first name so it can price the order; your full name, phone number and address go to that one pharmacy only after you approve its price on your order link. It can see them for 7 days after delivery. We also keep what the pharmacy charged and, if you tell us, what you paid and your rating.
• Asking for an ambulance (WhatsApp): your name, phone number, pickup address and PIN code, and what is needed. Because it may be an emergency, every ambulance service covering your PIN code is alerted, and the one that accepts sees your phone number and pickup address straight away, for 7 days after the trip. We always give you 108 and nearby numbers first; you never have to wait for us.
• Asking about health insurance (WhatsApp): your name, phone number, PIN code, the cover you want, who it is for (with ages) and when to call. Licensed advisors serving your PIN code see what you want but not who you are; only the one advisor who accepts gets your name and number, for 90 days. In those 90 days the advisor may also send you WhatsApp messages about cover, if they use Sehatsandhi's WhatsApp service — send STOP to stop them. Your medical records are never shared with an advisor. You can tell us on your request link if they did not call, and say afterwards whether you bought a policy.
• The Sehatsandhi app, for patients: you sign in with a one-time code sent to your WhatsApp; we keep your number, when you signed in, and your phone's notification token so we can remind you to rate a visit, an order, a trip or an advisor (turn notifications off in your phone settings to stop them). If you tap "Use my location", your phone's position is used once to find your PIN code — sent to BigDataCloud only for that lookup and not stored — except for an ambulance request, where it is sent to the ambulance service that accepts, as a map pin, for 7 days after the trip. A prescription photo you add is stored privately under your account and shared with the pharmacy that takes your order through a link that stops working after 14 days. Whether a request came from the app, WhatsApp or the website is recorded, to understand how people use Sehatsandhi.
• What you type to our WhatsApp assistant or in the app's search box: the message, to work out what you need — a kind of doctor, a test, medicines, an ambulance, insurance or a health camp, and your area and day — and take you to the right place. This is done by our own rules, with no outside AI service, and it never gives a diagnosis or suggests a medicine. A message that looks like an emergency is answered with 108 and 112 straight away. We keep the message with what it was understood as, so our team can check and improve the understanding; your phone number is not kept with it — only a one-way scrambled code of it (WhatsApp) or your app sign-in (app).
• Your records and messages in the app: signed in with your number, you see what clinics on Sehatsandhi have recorded for the people on that number — visits, prescriptions, lab reports, bills and discharge summaries — because they are yours to see. Anyone who signs in with that number sees them, so keep your phone to yourself. You can message a clinic you have visited; the clinic's staff read and answer it, the message and who answered are kept with the clinic's records, and a photo you send is shared through a link that stops working after 14 days.
• Health tips from Sehatsandhi: only if you tap "Yes, send me health tips" on our WhatsApp. We keep that consent and the message as proof. Send STOP at any time to stop.
• Your phone numbers and corrections: a clinic may keep more than one number for you, including a number outside India, and may correct your name, age or gender if it was typed wrong; every correction is recorded with who made it.
• Clinic and marketing messages: a clinic may send you health camp, reminder or offer messages only if you agreed — for example by scanning its QR code or telling the clinic — and only that clinic. To stop them from every clinic at once, send STOP on our WhatsApp; send START to turn them back on. Appointment, prescription, bill and report messages continue either way (section 7).
• Doctors, businesses and their staff: name, phone, email, qualification and registration number (checked against the National Medical Commission's Indian Medical Register), a pharmacy's drug licence and an insurance advisor's IRDAI licence or POSP code, clinic address, GST details if you give them, sign-in details for each staff member, who did each step of an order, trip or lead, wallet top-ups and lead fees, and payments of fees — made through Razorpay; we never see or store your card, UPI PIN or bank password. If staff use the Sehatsandhi app, we keep their phone's notification token so alerts reach them; it is removed when they sign out.
• Contact form: your name, phone or email and your message, so we can reply.
• Daily social posts, for businesses that use them: if a business connects its Facebook Page (and the Instagram account linked to it) through Facebook Login, we receive the Page's name and ID, the linked Instagram account's ID and username, and a key from Meta that lets us post to that Page and account. We use them only to publish the posts the business approved — the daily health-awareness image, as a post and a story, and on Instagram as a photo, story or reel — and to show the business which Page and account are connected. We do not read the Page's or account's followers, messages, comments, insights or any other content, and we never use them for advertising. The keys are kept encrypted on our servers and are never shown to anyone. The business can remove our access at any time with Disconnect, or in its Facebook settings; see sehatsandhi.com/data-deletion.
• Using our website: anonymous usage events on our own systems — pages opened, what speciality or area was searched, which listings were shown, viewed or tapped, and when the WhatsApp or call button was used — with a temporary per-tab identifier that is discarded when you close the tab, your device type and the website you came from. Search text is removed from page addresses. These are never linked to your name or phone number, and are not recorded at all if your browser sends "Do Not Track".
• Approximate location of a visit: worked out from your internet address by a lookup service (ipwho.is), accurate at best to a town and often wrong on mobile networks. We keep one location per visit, not a history, never linked to your name, phone or bookings. Not recorded under "Do Not Track".
• Counting how Sehatsandhi is used: we count how Sehatsandhi is used — for example how many people booked in a month, through which channel and in which area — as totals that do not identify anyone, to run the service and to report on it, including to investors, grant bodies and banks. These reports never contain names, phone numbers or health details.
• Checking an area on our page for businesses: what you typed or the district found and how you searched, with the same per-tab identifier, so we can see which areas businesses are interested in. If you press "Use my location" and allow it in your browser, your position is rounded to about 1 km and sent once to BigDataCloud only to find your district; we do not store those coordinates. Once allowed, the page may use it again on later visits until you withdraw it in your browser settings.
• Google Analytics: only if you choose "Allow" on the banner shown on your first visit. It sets Google cookies and tells us how many people visit and which pages help. You can change your choice any time from "Analytics settings" at the bottom of every page.

We do not sell your personal data, use your health information for advertising, or show advertising based on it.

3. On what basis

• Consent — for marketing messages from a clinic, Google Analytics, precise location and voice notes. Consent is free, specific and can be withdrawn as easily as it was given; withdrawing does not affect what was done before, but the feature may stop.
• Legitimate uses allowed by section 7 of the DPDP Act — when you give us your data yourself for a purpose (for example, to book an appointment or to register your clinic), to respond to a medical emergency, and to comply with the law or a court order.
• As a processor for clinics — on the clinic's own lawful basis and instructions.

4. Who else handles your data

We share your booking with the doctor or partner you choose, so they can serve you — and a medicine order, ambulance request or insurance request with the pharmacy, ambulance service or advisor as described in section 2. Once a partner has your details, it is responsible for using them only to serve you. To run the service we use these providers, each under contract and only for the purpose shown:

• Supabase — secure hosting of our database and files (servers in Mumbai, India).
• Vercel — hosting of this website.
• AiSensy and Meta (WhatsApp Business) — sending and receiving WhatsApp messages. Meta's own terms apply to WhatsApp; its Cloud API keeps message content for up to 30 days.
• Meta (Facebook and Instagram) — publishing a business's approved daily posts to its own Facebook Page and Instagram account, only if the business connects them. Meta's own terms and privacy policy apply to Facebook and Instagram.
• MSG91 — SMS and email; Zoho ZeptoMail — email.
• Razorpay — payments.
• Expo (expo.dev) — delivering notifications to the Sehatsandhi app on staff phones; a notification carries only a short line such as an order number or a patient's first name.
• Sarvam AI — converting a consultation voice note to text, only if your clinic uses voice notes. The audio is deleted as soon as it is converted, and in any case within 7 days.
• Anthropic — reading the doctor-checked text of a voice note to draft medicine suggestions for the doctor to accept or change, only if the clinic uses this. No audio is sent.
• Google — Analytics (only with your consent) and Places (to look up a clinic's address when a business registers).
• ipwho.is, BigDataCloud and India Post's pincode service (api.postalpincode.in) — turning an internet address, a rounded position or a pincode into a place name.
• National Medical Commission — checking a doctor's registration.

We may also disclose data when the law requires it — to a court, regulator or law-enforcement agency with lawful authority — and we will tell you where the law allows.

5. Processing outside India

Our database is hosted in Mumbai, India, and some providers above (Meta, Google, Anthropic, Vercel) may process data in other countries. Section 16 of the DPDP Act allows this except to countries the Government of India restricts; we will stop or move any processing if a restriction is notified. Wherever it is processed, your data stays under the protections in this policy and our contracts.

6. How long we keep it

We keep data only as long as its purpose needs, or longer only where the law requires. These deletions are automatic:

• Documents in a clinic's records (reports, scans, consent forms and others): kept for the period the clinic sets, 10 years from the document's date unless it sets another, then the file is deleted. Clinics must also keep records for the periods medical regulations require. A clinic can place a document on legal hold, for example for a court case, and then it is kept until the hold ends.
• Lab report files uploaded by a lab: for the lab's plan, 1 year unless the lab's plan says otherwise; then the file and its link stop working.
• Consultation voice notes: deleted once converted to text, and within 7 days at most.
• WhatsApp message content in our systems: deleted 7 days after the conversation closes.
• Approximate visit location: 90 days after the visit's last activity.
• Anonymous website usage events: about 13 months.
• Area searches on the page for businesses: 12 months.
• Contact form messages: 24 months.
• A business's Facebook and Instagram connection (Page and account names and IDs, and the posting keys): until the business presses Disconnect or removes Sehatsandhi in its Facebook settings — then deleted at once — or when its Social posts service ends. Posts already published stay on its own Page and account, which it controls.
• Used or expired sign-in codes: deleted daily. Phone verification codes: 30 days after use or expiry.
• Records of messages we sent (number, template and delivery status): 12 months. Queued notifications and emails: 90 days after they were sent or failed.
• WhatsApp conversation records: 12 months after the conversation closed; the record that a number wrote to us: 24 months after its last message.
• Search logs of the WhatsApp assistant (no phone number is kept): 24 months.
• What you typed to our WhatsApp assistant or the app's search box: the words are deleted after 90 days; what they were understood as (for example "eye doctor, Jagadhri, tomorrow") is kept without them for 24 months, to measure and improve the service.
• Medicine orders, ambulance requests and insurance requests: kept with business records (below); a partner stops seeing your contact details 7 days after a delivery or trip, and 90 days after accepting an insurance request.
• Bookings, patient and business accounts, bills and payment records: while the account is in use and afterwards for as long as tax, accounting and medical-record laws require; then deleted or made anonymous. You can ask for earlier erasure where the law allows (section 7).
• Logs of which staff member searched or opened a patient's record: kept with that record, for security and audit, and for at least one year as the DPDP Rules require.

7. Your rights and how to use them

Under the DPDP Act you may:

• get a summary of your personal data we process, what we do with it, and who we have shared it with;
• have it corrected, completed or updated;
• have it erased when it is no longer needed, unless the law requires us to keep it;
• withdraw consent you gave, at any time — for promotional messages and rating requests from clinics, simply send STOP on WhatsApp (START turns them back on), or tell the clinic or us;
• have a grievance heard and answered by our Grievance Officer (section 11);
• nominate a person to use these rights for you if you die or cannot act yourself.

To use a right, choose "My personal data" on our Contact page (sehatsandhi.com/contact?topic=privacy), email contact@sehatsandhi.com with the words "Privacy request", or message us on WhatsApp — with your name and phone number. We may confirm it is you with a one-time code to your phone. A parent or guardian can ask on behalf of a child or a person they are the lawful guardian of. For records kept by a clinic, we pass the request to that clinic and help it respond. We acknowledge every request within 24 hours and resolve it within 15 days. We keep a record of each request and what we did for 3 years after it is closed, as evidence that it was handled. You also have duties under the Act: give correct information, do not impersonate anyone, and do not make false or frivolous complaints.

8. Children and people who need a guardian

Our service is for adults. A booking or record for a child (under 18) or for a person with a disability who needs a lawful guardian is made by their parent or guardian, who gives consent on their behalf. We use such data only to provide health services, and we never track the behaviour of children or show them targeted advertising. Clinics are responsible for guardian consent for the records they keep.

9. How we protect it

Data travels encrypted (HTTPS) and is encrypted at rest by our hosting provider. Access is limited by role and enforced in the database itself: clinic staff see only their own clinic, and a doctor sees the patients they treat. Every search and opening of a patient record is logged with who did it. Staff passwords expire every 90 days, one-time codes are stored only as hashes, and secrets are kept in a vault. No system is completely secure, but we take reasonable security safeguards as the law requires.

10. If there is a data breach

If a personal data breach affects you, we will tell you without delay — what happened, when, the likely impact, what we are doing and what you can do — and we will report it to the Data Protection Board of India as the DPDP Rules require (with a full report within 72 hours) and to CERT-In where its directions require (within 6 hours).

11. Grievance Officer and complaints

Grievance Officer, NG Technologies (Sehatsandhi) — email contact@sehatsandhi.com, phone +91 85708 89188, or the form on our Contact page, which also shows our registered address. We acknowledge a grievance within 24 hours and resolve it within 15 days. If you are not satisfied with our answer, you may complain to the Data Protection Board of India.

12. Cookies and similar storage

The site stores your language and your analytics choice in your browser, and a temporary per-tab identifier that disappears when you close the tab. Google Analytics cookies are set only if you allow them. Blocking storage in your browser does not stop you booking.

13. Changes to this policy

When we change this policy, we update the date at the top. If a change needs your consent — for example, a new purpose — we will ask for it before applying it to you. This policy is governed by the laws of India and is read with our Terms.