Introduction & Scope
Welcome to DocClix ("we," "our," or "us"). We provide healthcare professional discovery, practice growth infrastructure, Google Business Profile optimization, and appointment scheduling tools for doctors, clinics, hospitals, and patients across India.
We recognize the deeply sensitive nature of healthcare data. This Privacy Policy sets out how DocClix processes, stores, and protects personal data gathered through our websites (docclix.ai), mobile portals, and related services.
Information We Collect
We collect only the minimum necessary information required to deliver verified medical discovery and practice management tools:
- check_circle Profile & Credentials: Name, medical council registration number, qualifications, specializations, consultation fees, and profile photographs.
- check_circle Facility Details: Clinic/hospital addresses, consultation hours, geo-coordinates, phone numbers, and operational amenities.
- check_circle Account & Billing Data: Registered mobile phone numbers, email addresses, subscription tier, and payment verification records (processed securely via PCI-DSS certified gateways like Razorpay; DocClix does not store raw credit/debit card numbers).
- check_circle Basic Contact Information: Name, phone number, and email address used for booking confirmation and appointment status updates.
- check_circle Appointment Records: Requested appointment date, time, preferred specialty, and consultation format (in-clinic or teleconsultation).
- check_circle Technical & Log Information: IP address, device type, browser specifications, and approximate city-level geolocation (used exclusively to suggest nearby verified doctors).
How We Use Your Information
We use the collected information for specific, lawful purposes including:
- check_circle Care Discovery & Booking: Facilitating verified doctor discovery, clinic mapping, and booking appointments.
- check_circle Google Business Profile & AI Visibility: Structuring and deploying schema markup (JSON-LD) to enhance practitioner search presence on Google Maps, ChatGPT, Gemini, and Perplexity.
- check_circle Notifications & Reminders: Dispatching transactional booking confirmations, rescheduling notices, and WhatsApp review invitations on behalf of authorized clinics.
- check_circle Security & Fraud Prevention: Verifying doctor medical council registration records, monitoring unauthorized access, and maintaining system audit trails.
Sharing & Disclosure
We strictly restrict disclosure of your personal data. We only share information under the following defined circumstances:
- check_circle Between Patients and Doctors: When a patient schedules a visit, relevant appointment details are shared directly with the chosen healthcare provider to confirm the consultation.
- check_circle Service Providers & Infrastructure: Trusted technical partners (e.g. AWS cloud infrastructure, official WhatsApp Business API service providers, and SMS gateways) under strict non-disclosure and data protection agreements.
- check_circle Legal & Regulatory Compliance: When compelled by valid Indian judicial orders, statutory authorities, or applicable public health regulations.
Data Security & Encryption
We employ industry-standard technical and organizational security measures to protect healthcare information against loss, unauthorized access, alteration, or disclosure:
- lock 256-Bit SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted in transit using modern cryptographic ciphers.
- key Secure Tokenized Integrations: Official Google and Meta integrations use OAuth 2.0 token authorization so passwords are never captured or stored.
- verified_user Role-Based Access Control: Strict least-privilege access controls ensure only authenticated personnel can inspect technical server environments.
- database Encrypted Cloud Backups: Automated daily backups stored with encryption at rest to guarantee continuity and disaster recovery.
Your Legal Rights
In accordance with applicable Indian data protection laws and digital privacy standards, you have the following rights regarding your personal information:
- rule Right of Access: You may request a copy of the personal details we hold associated with your account.
- edit Right to Correction: You may correct inaccurate or outdated profile information at any time via your dashboard or customer support.
- delete Right to Erasure: You can request the deletion of your account and associated non-statutory records.
- cancel Right to Withdraw Consent: You may revoke consent for optional communications and marketing notifications at any point.
Grievance Officer & Inquiries
If you have questions, feedback, or grievances regarding our privacy practices or wish to exercise your legal data rights, please contact our designated Grievance Officer: