Privacy & DPDP
Plain-language summary of how docbook.ai handles personal data under the Digital Personal Data Protection Act, 2023. Last updated: 9 October 2026.
Who is responsible
When a clinic uses docbook.ai, the clinic is the Data Fiduciary for its patients’ data, and docbook.ai acts as its Data Processor: we process data only on the clinic’s instructions to run the service. For information you submit on this website (for example, the contact form), docbook.ai is the Data Fiduciary.
What we collect
- Clinic staff: name, email, phone, role and login details.
- Patients: name, mobile number, appointment details and the clinical records the clinic enters (consultations, procedures, medicines, follow-ups).
- Website enquiries: name, phone, email, clinic, city, plan interest and your message.
Consent & purpose
Consent is captured at sign-up with a clear notice of what is collected and why. Data is used only to book and manage appointments, keep patient records for the clinic, send reminders the clinic has switched on, and provide support. We never sell personal data or use it for advertising.
Where data is stored
All application data is stored in India (AWS Mumbai region, via Supabase).
How we protect it
- Encryption in transit (TLS) and at rest.
- Row-level access control: every role sees only what it is allowed to see.
- Staff accounts are approved by the clinic admin.
- Audit trail of important changes to support breach investigation.
Your rights as a Data Principal
You can ask to access, download, correct or erase your data, withdraw consent, nominate someone to act for you, and raise a grievance. Patients can download their own data from their account. For anything else, contact your clinic or write to us.
Retention
Clinics decide how long patient records are kept, in line with medical record-keeping rules. Website enquiries are deleted within 24 months if you don’t become a customer.
Breaches
If a personal data breach happens, we inform affected clinics without delay and support them in notifying the Data Protection Board and affected people as the law requires.
Cookies
This website uses no tracking or advertising cookies. We only store your light/dark theme choice in your browser.
Grievance officer
Email privacy@docbook.ai or write to docbook.ai, Pune, Maharashtra, India. We respond within the timelines set by the DPDP Rules.