Privacy Policy

1. Introduction

SourceForge Software Services Pvt Ltd (“MedClinic24”, “we”, “us”, or “our”) operates the MedClinic24 platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services. By accessing or using MedClinic24, you agree to the terms of this Privacy Policy.

2. Information We Collect

We may collect the following types of information:

• Account Information: Name, email address, phone number, medical registration number, and clinic details provided during registration.
• Patient Data: Appointment details, prescription records, and consultation notes entered by doctors using the platform. This data is owned by the doctor and their patients.
• Usage Data: Pages visited, features used, browser type, IP address, and device information collected automatically through server logs.
• Payment Information: Billing details processed securely through our third-party payment provider (Razorpay). We do not store full card numbers on our servers.

3. How We Use Your Information

• To provide, maintain, and improve our services.
• To process transactions and send billing communications.
• To send service-related notifications such as appointment reminders and system updates.
• To respond to customer support requests.
• To analyse usage trends and improve platform performance and security.
• To comply with applicable laws and regulations.

4. Cookies and Tracking Technologies

We use essential cookies to keep you signed in and remember your preferences. We may also use analytics cookies (such as Google Analytics) to understand how visitors interact with our website. You can disable cookies in your browser settings, though some features may not work correctly without them.

5. Third-Party Services

We integrate with the following third-party services to provide our platform:

• Amazon Web Services (AWS): Cloud infrastructure and data hosting in the Mumbai (ap-south-1) region.
• Razorpay: Payment processing for subscription billing.
• WhatsApp Business API: Appointment reminders and patient communication (with doctor opt-in).

Each third-party service has its own privacy policy governing the use of your information.

6. Data Security

We implement industry-standard security measures including encryption at rest (AES-256) and in transit (TLS 1.3), role-based access controls, and regular security audits. While no method of transmission over the Internet is 100% secure, we strive to protect your data using commercially reasonable means.

7. Data Retention

We retain your account information for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law. Patient medical records entered by doctors are retained per applicable medical record-keeping regulations.

8. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated personal data.
• Withdraw consent for non-essential data processing at any time.

To exercise any of these rights, contact us at privacy@medclinic24.com.

9. Children's Privacy

MedClinic24 is designed for use by medical professionals. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have collected data from a minor, we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email or an in-app notification. Your continued use of MedClinic24 after any changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us: