Privacy Policy

This Privacy Policy explains how CLINZO Technologies Private Limited ("CLINZO", "MedPresto", "we", "us", or "our") collects, uses, shares, retains, and protects personal data when you use MedPresto's website, patient services, clinic services, or support channels.

1. Who we are and the scope of this policy

MedPresto is operated by CLINZO Technologies Private Limited, Maharashtra, India. Our contact address is C7/109 Wighnahar Society, Mahada, Malwani, Malad West, Mumbai 400095.

This policy applies to patients and their representatives, public website visitors, clinics and facility users, doctors, and other authorised clinic users. It does not replace a clinic's own privacy notice for care that the clinic provides.

For patient-care records a clinic enters into MedPresto, the clinic generally decides why the data is used for its clinical and operational purposes. MedPresto processes that data to provide the platform. MedPresto independently determines the purposes for data used to operate, secure, bill for, and improve the service.

2. Personal data we collect

• Account and contact data: name, mobile number, email address where supplied, authentication and session information, and authorised user role.
• Clinic and professional data: facility and doctor profiles, registration details, schedules, fees, and registration evidence.
• Booking, queue, and care data: patient and representative details, appointments, queue tokens, consultation information, prescriptions, clinical notes, diagnoses, vital information, and medicine information entered by or for a clinic.
• Payment and subscription data: plan, invoice and transaction details, payment status, and payment-provider reference IDs. We do not store payment-card, UPI, or other payment credentials.
• Communication, technical, and security data: WhatsApp number and preferences, delivery status, IP address, browser and device information, timestamps, and security and audit logs.
• Location, support, and verification data: clinic addresses, map/place information, location information you choose to provide, support messages, requests, and documents submitted for verification.

3. How we use personal data

• Create and secure accounts, verify mobile numbers, and manage access.
• Enable facility listings, doctor profiles, appointments, tokens, live queue information, consultations, and prescriptions.
• Verify clinic and doctor registration information and protect patients and the platform from fraud or misuse.
• Process payments, issue invoices, and provide support.
• Send essential service communications, including WhatsApp messages where enabled and permitted.
• Display facility locations and support care discovery using Maps and Places services.
• Maintain, troubleshoot, protect, and improve MedPresto, including through aggregated or de-identified insights.

We process personal data for purposes permitted by applicable law, including with consent where required and for legitimate uses permitted by law. A clinic is responsible for its patient-facing notice and any permissions required for care data it asks us to process on its behalf.

4. When we share personal data

• The clinic and its authorised users: patient booking, queue, and care information is available to the selected clinic and its authorised staff and doctors.
• Service providers: Amazon Web Services (AWS) hosts our PostgreSQL database and document storage; Meta provides the WhatsApp Business Platform; Razorpay processes payments; and Google provides Maps and Places services.
• Professional advisers, authorities, and successors: where required by law, needed to protect rights or safety, investigate fraud or security incidents, obtain advice, or complete a corporate transaction.

We do not sell personal data or disclose it for targeted advertising.

5. WhatsApp, Maps, and Places

MedPresto may use Meta's WhatsApp Business Platform for essential service communications, such as booking, token, queue, and account notifications. WhatsApp communications are subject to Meta's own terms and privacy practices. You may ask the relevant clinic or contact us to stop non-essential WhatsApp communications.

We use Google Maps and Places services to display facility locations and help users find care. Google may process information under its own privacy policy and terms when you use those features. Please do not enter sensitive health information into a map or location-search field.

6. Security and retention

We use reasonable technical and organisational measures designed to protect personal data, including authentication, role-based permissions, private document access controls, logging, and secure communications. No system is completely secure; please keep your account and device secure and notify us promptly if you believe your account has been compromised.

We retain personal data only for as long as reasonably necessary to provide the service, maintain security, resolve disputes, meet applicable legal, tax, accounting, or clinical-record obligations, and enforce our agreements. Retention can differ by data type and a clinic's lawful requirements. When data is no longer required, we delete it, de-identify it, or securely isolate it as required by applicable law and our operational processes.

7. Your choices and rights

Subject to applicable law, you may ask us to confirm whether we process your personal data, correct inaccurate data, provide an available export, delete data, or address a grievance. Patients can use available account controls and may submit a request through the contact details below. Clinics should handle requests about their patient-care records first; MedPresto will assist clinics where required under our agreement and applicable law.

We may need to verify your identity. We may retain or decline to delete limited data where retention is required or permitted by law, needed for security, or necessary to establish, exercise, or defend legal claims.

8. Children's data

Clinics may provide services to children. A parent or legal guardian should provide or manage personal data for a child using MedPresto. We do not knowingly use children's personal data for targeted advertising.

9. Changes to this policy

We may update this policy to reflect changes to MedPresto, our providers, or applicable law. We will post the updated version and effective date here and, where required, provide additional notice or seek a new consent.

10. Contact and grievance redressal

Please include enough information for us to identify your account and understand your request. We handle grievances in accordance with applicable law.