Privacy Policy

Introduction

Welcome to Odireca Technologies Pvt Ltd ("Odireca", "we", "us", or "our"). We operate the healthcare management platform available at odireca.com. This Privacy Policy describes how we collect, use, and share your personal information when you use our services.

By using our Services, you agree to the collection and use of information in accordance with this policy. We are committed to protecting your privacy and complying with the Digital Personal Data Protection (DPDP) Act 2023 of India and other applicable data protection regulations.

Information We Collect

We collect several types of information for various purposes to provide and improve our Service to you:

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you:

• Full Name and Contact Details (Email, Phone Number)
• Business/Clinic/Pharmacy Information
• Billing and Payment Information

As a healthcare provider, when you input patient data into Odireca, you are the Data Fiduciary and Odireca acts as the Data Processor. We process this data only to provide the services you've subscribed to. We do not own or control this data.

We may also collect information that your browser sends whenever you visit our Service or when you access the Service by or through a mobile device:

• Internet Protocol (IP) address
• Browser type and version
• The pages of our Service that you visit
• The time and date of your visit
• Time spent on those pages
• Unique device identifiers and other diagnostic data

How We Use Your Data

Odireca uses the collected data for various purposes:

• To provide and maintain the Service.
• To notify you about changes to our Service.
• To provide customer care and support.
• To provide analysis or valuable information so that we can improve the Service.
• To monitor the usage of the Service.
• To detect, prevent and address technical issues.
• To process your transactions and manage your subscription.

Note: We never sell your data or your patients' data to third parties. Your data is strictly used for providing the platform services.

Cookies and Tracking

We use cookies and similar tracking technologies to track the activity on our Service and hold certain information. Cookies are files with small amount of data which may include an anonymous unique identifier.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

Examples of Cookies we use:

• Session Cookies: We use Session Cookies to operate our Service.
• Preference Cookies: We use Preference Cookies to remember your preferences and various settings.
• Security Cookies: We use Security Cookies for security purposes.

Data Security

The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

We implement:

• Industry-standard SSL/TLS encryption for all data in transit.
• Automated daily backups.
• Restricted internal access to production databases.
• Data localization (Indian user data is stored on servers within India).

Third-Party Service Providers

We may employ third party companies and individuals to facilitate our Service ("Service Providers"), to provide the Service on our behalf, or to perform Service-related services.

• Payment Processors: For secure billing (e.g., Razorpay/Stripe).
• Communication Tools: For OTPs, reports via WhatsApp/SMS.
• Cloud Infrastructure: Secure hosting (AWS/Google Cloud).

These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Children's Privacy

Our Service does not address anyone under the age of 18 ("Children") directly. We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us.

Your Rights

Under the DPDP Act 2023, you have certain rights regarding your personal data:

• The right to access, update or delete the information we have on you.
• The right of rectification.
• The right to object.
• The right of restriction.
• The right to data portability.
• The right to withdraw consent.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

We will let you know via email and/or a prominent notice on our Service, prior to the change becoming effective and update the "last updated" date at the top of this Privacy Policy.

Contact Us

If you have any questions about this Privacy Policy, please contact us: