Privacy Policy

This policy describes our practices in plain language. It is not a substitute for a signed customer agreement or legal advice. Product processing is also summarised in our Data Processing overview.

1. Who we are

“VaitalCare”, “we”, “us” refers to the operators of the Patient Retention Engine product and the website at vaitalcare.com. Contact: vaitalcare.bnglr@gmail.com.

2. Information we collect

Marketing website

• Demo / contact details you submit (name, phone, clinic type, message).
• Basic technical logs (IP address, browser type, pages visited) for security and reliability.
• Optional analytics if enabled in production (we do not sell personal data to ad networks).

Product (clinic customers)

• Clinic account and staff authentication details.
• Patient-related data clinics enter or receive via intake (e.g. name, phone, visit/prescription context), stored and processed so the clinic can run retention workflows.
• Message delivery metadata (status, timestamps) for troubleshooting.

3. How we use information

• To respond to demos and support requests.
• To provide the contracted product features (intake, queue, prescriptions, WhatsApp messaging, analytics).
• To secure systems, prevent abuse, and meet legal obligations.
• To improve the product based on aggregate usage patterns, not for selling patient lists.

4. Sharing

We use infrastructure and messaging subprocessors required to run the product (for example cloud hosting, database, and WhatsApp Business API providers such as Twilio, subject to the clinic’s configuration). We do not sell patient data. We may disclose information if required by law or to protect rights and safety.

5. Retention

Marketing leads are retained as needed to respond and for reasonable business records. Clinic customer data retention follows the customer agreement and product settings; clinics may request export or deletion subject to applicable law and active legal holds.

6. Security

We apply access controls, encryption in transit (HTTPS), and tenant scoping for clinic data. No method of transmission or storage is 100% secure; report concerns to the email above promptly.

7. Your rights (India)

Depending on applicable law (including the Digital Personal Data Protection Act, 2023, as implemented), individuals may have rights to access, correction, and erasure of personal data. Patients should first contact their clinic for clinical records. For VaitalCare-held marketing or account data, email us with enough detail to verify and respond.

8. Children

The marketing site is intended for clinic professionals, not children. Clinics are responsible for lawfully collecting guardian-related or paediatric data when using the product.

9. Changes

We may update this policy and will revise the “Last updated” date. Material product changes may also be communicated to contracted customers.