Privacy Policy

MediSuggest Services India Pvt. Ltd. ("ConsultPro", "we", "us", or "our") operates the ConsultPro platform, a software-as-a-service ("SaaS") solution for managing billing relationships between hospitals and visiting consultants in India.

This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our website (consultpro.in.net), web application (app.consultpro.in.net), and any associated services (collectively, the "Service").

By accessing or using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this policy, please do not use the Service.

We collect information that you provide directly to us, as well as information generated automatically when you use our Service.

2.1 Account Data

When you register for an account, we collect:

• Full name and professional title
• Email address and phone number
• Organisation name, address, and GSTIN (if applicable)
• PAN (Permanent Account Number) for TDS processing
• Role within the organisation (e.g. hospital admin, consultant)

2.2 Usage Data

We automatically collect information about how you interact with the Service:

• Pages visited, features used, and actions performed
• Timestamps and frequency of visits
• Referral source and navigation patterns

2.3 Billing Data

To process subscriptions and facilitate consultant billing, we collect:

• Subscription plan and billing cycle
• Payment method details (processed securely via Razorpay)
• Invoice history and transaction records

2.4 Device Information

• IP address and approximate geographic location
• Browser type, version, and operating system
• Device type (desktop, mobile, tablet)
• Screen resolution and language preference

We use the information we collect for the following purposes:

3.1 Providing the Service

To operate, maintain, and improve the ConsultPro platform, including visit management, billing generation, TDS calculation, payment tracking, and multi-tenant organisation management.

3.2 Billing & Payments

To process subscription payments, generate invoices, manage Razorpay payment integrations, and maintain financial records as required under Indian law.

3.3 Notifications

To send transactional notifications (e.g. visit confirmations, billing approvals, payment receipts) via email and WhatsApp, as well as platform updates and service-related announcements.

3.4 Analytics & Improvement

To understand usage patterns, identify popular features, diagnose technical issues, and improve the overall user experience.

3.5 Legal & Compliance

To comply with applicable laws including the Information Technology Act, 2000, the Income Tax Act, 1961 (for TDS obligations), and any future data protection legislation applicable in India.

We do not sell, rent, or trade your personal information to third parties. We may share your data only in the following circumstances:

4.1 Service Providers

We engage trusted third-party service providers who assist us in operating the platform, including cloud infrastructure providers, payment processors (Razorpay), communication services (Gallabox for WhatsApp), and analytics tools. These providers are contractually obligated to protect your data and use it only for the purposes we specify.

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g. a court order, government agency, or tax authority).

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction. We will notify you of any such change and ensure the receiving entity honours this Privacy Policy.

We take the security of your data seriously and implement industry-standard measures to protect it:

• Encryption: All data is encrypted at rest using AES-256 and in transit using TLS 1.2 or higher.
• Multi-tenant isolation: Each organisation's data is logically separated at the database level, with tenant-scoped queries enforced on every request.
• India-based servers: Your data is stored on servers located in India, in compliance with data localisation expectations for sensitive healthcare and financial data.
• Access controls: Role-based access control (RBAC) ensures that only authorised personnel within your organisation can view or modify data.
• Regular audits: We conduct periodic security assessments and vulnerability scans to identify and remediate potential risks.

You have the following rights with respect to your personal data:

• Right to access: You may request a copy of the personal data we hold about you at any time.
• Right to correction: You may request that we correct any inaccurate or incomplete personal data.
• Right to deletion: You may request deletion of your personal data, subject to our legal obligations to retain certain records (e.g. financial data under Indian tax law).
• Right to data portability: You may request your data in a structured, machine-readable format for transfer to another service.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

We use cookies and similar tracking technologies to enhance your experience on our platform:

• Essential cookies: Required for the platform to function, including authentication tokens and session management.
• Analytics cookies: Help us understand how users interact with the Service so we can improve features and performance.
• Preference cookies: Remember your settings and preferences (e.g. language, theme).

You can manage cookie preferences through your browser settings. Please note that disabling essential cookies may impair the functionality of the Service.

We retain your data for as long as necessary to provide the Service and comply with our legal obligations:

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a person under 18, we will take steps to delete that information promptly. If you believe a minor has provided us with personal data, please contact us at [email protected].

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Notify you via email or an in-app notification for significant changes
• Where required by law, obtain your consent before applying the revised policy

We encourage you to review this page periodically to stay informed about how we protect your data.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

MediSuggest Services India Pvt. Ltd.

Email: [email protected]

Website: consultpro.in.net

Support: [email protected]