Privacy Policy
We understand the sensitive nature of patient health records, digital prescriptions, and Protected Health Information (PHI). Here is how drpdf safeguards, encrypts, and respects your clinic, hospital, and patient data.
1. Our Privacy Commitment
drpdf Inc. ("drpdf", "we", "us") treats data privacy with utmost priority. In healthcare management, trust is paramount. This Privacy Policy outlines our procedures regarding the collection, processing, protection, and disclosure of information when you use the drpdf platform.
We do not sell, rent, license, or exchange patient health records, demographics, or clinic financial data with advertisers, third-party brokers, or pharmaceutical marketing entities.
2. Information We Collect
We process information under two broad classifications:
A. Clinic Account & Staff Information
Hospital/Clinic name, GSTIN, administrator email, phone number, doctor staff profiles, medical qualifications, medical or dental council registration numbers, and billing details for subscription payments.
B. Patient Health Information (PHI)
Patient demographics (name, date of birth, phone, email, emergency contact), medical history, allergies, clinical notes, vitals, specialty-specific charting, digital prescriptions (PDF), laboratory test reports, diagnostic imaging, and billing transaction histories inputted by your clinic staff.
3. How We Use Information
We process data exclusively for the following operational objectives:
- Rendering core EHR features, doctor appointments, digital prescriptions (PDF), and specialty clinical records
- Generating compliant GST invoices, receipts, and payment settlements
- Dispatching automated appointment confirmations and reminders via SMS or WhatsApp upon clinic request
- Enabling secure patient portal authentication via one-time SMS passwords (OTP)
- Executing optional AI suggestions and command parsing requested directly by your staff
- Ensuring multi-tenant security, intrusion detection, and platform stability
4. Non-Monetization Guarantee
Your patient records belong exclusively to your clinic. drpdf acts as a Data Processor (under the DPDP Act and GDPR) and Business Associate (under HIPAA), while your clinic acts as the primary Data Fiduciary / Covered Entity.
We do not use patient records to train public AI models. Any generative AI features operated within drpdf are executed via zero-data-retention APIs where prompt information is not saved or used for model improvements.
5. Encryption & Security Controls
All database volumes, X-rays, and document uploads are encrypted using industry-standard AES-256 bit encryption.
All communication between browser, mobile portal, and cloud servers is enforced over TLS 1.3 cryptographic protocols with HSTS enabled.
Passwords are encrypted using modern salted Bcrypt algorithms. Multi-factor authentication and role-based permission boundaries strictly partition data between clinics.
6. Authorized Sub-processors
To provide cloud infrastructure, drpdf engages vetted third-party sub-processors that meet stringent security benchmarks:
| Partner | Function | Data Location |
|---|---|---|
| AWS / S3 Storage | Secure Document, Prescription & Medical Image Object Storage | India / Asia Pacific |
| Razorpay / PhonePe | Payment Gateway Processing | India |
| MSG91 / Fast2SMS | Transactional Appointment SMS Alerts | India |
| OpenRouter AI | Zero-Data-Retention Clinical Assistant | Global (No storage) |
7. Data Retention & Deletion
Patient health records are retained for as long as your clinic maintains an active account or as required by local medical record retention mandates (e.g., 3 to 7 years according to Indian medical regulations).
Clinics may request permanent deletion of specific records or all account data at any time. Upon account closure and expiration of the 30-day export grace period, backups and active tables are permanently purged.
8. Clinic & Patient Rights
Under applicable data privacy regulations, data subjects and clinics possess the following rights:
- Right to Access: View and retrieve complete digital medical histories.
- Right to Correction: Update inaccurate demographic or medical contact details.
- Right to Portability: Export records, appointments, and ledgers in open formats (PDF, JSON, Excel).
- Right to Opt-Out: Patients can opt out of promotional communications while preserving transactional healthcare alerts.
9. Data Storage & Hosting
Primary servers and databases for drpdf instances in India are hosted within Tier-4 data centers situated in India (Mumbai / Bengaluru), adhering strictly to Indian data sovereignty mandates for healthcare records.
10. Data Protection Officer (DPO)
For privacy inquiries, audit certifications, data processing agreements (DPA), or to exercise your rights: