Doctor Digital Identity Platform

Standard privacy policy. Describes what we collect and how we handle it — subject to legal-counsel refinement before final public launch.

1. Who we are

“We” refers to HUMANITYFIRST SOFTWARE TECHNOLOGY PRIVATE LIMITED (the Company), operator of the Doctor Digital Identity Platform. Contact: +91 7722090290, registered address A-803 Palatial Height, Chandivali Farm Road, Andheri, Mumbai, Maharashtra 400072, India.

2. Data we collect

Account data: name, email, mobile, medical registration number, city / state, and password (stored hashed via bcrypt).
Professional profile: qualifications, education, experience, awards, publications, memberships, affiliations, biography notes, consultation info, and any photos / documents you upload.
Payment records: order IDs, invoice numbers, amounts, gateway transaction references. We do not store full card / UPI / bank credentials — those live with our payment aggregator.
Usage / analytics: page views, feature usage, device / browser type, IP address, geo-region (city-level).
Communications: support tickets, in-app messages, feedback.

3. How we use it

To operate the Service, render your public identity page, and process payments.
To compose AI-generated copy (biography, summary, FAQs, SEO) grounded strictly in the data you provide.
To send transactional communications (OTP, payment receipts, publish notifications, AMC reminders).
To improve platform quality via aggregated, non-identifying analytics.
To respond to legal requests, prevent fraud, and enforce our Terms.

We do not sell your personal data. We do not use your data to train third-party AI models.

Necessary sub-processors:

Cashfree Payments India Pvt. Ltd. — payment processing (PCI-scoped data).
Cloud hosting — application and database hosting (data centres in India / Asia region).
Anthropic / Google (Gemini) / OpenAI — AI text generation via the Emergent Universal Key. Only the structured profile fields we send get processed; content is composed and returned in real time. AI providers do not receive your login credentials or payment data.
Support / analytics tooling — bug tracking and product analytics (anonymised where possible).

We share personal data with processors only to the extent needed for the specific service, under written contracts that bind them to confidentiality and data-security obligations. We do not share data with third parties for their independent marketing.

5. Storage & retention

Data is stored on servers physically located in India / Asia region. We retain your account and content data for as long as your account is active, and for a reasonable period thereafter to meet legal, tax, and audit obligations (typically up to 7 years for financial records; profile data purged within 90 days of account closure unless legally required to retain).

6. Security

Passwords are hashed (bcrypt) — never stored in plain text.
Data in transit is encrypted (HTTPS / TLS).
Payment credentials are handled by the payment aggregator; we hold only the aggregator’s reference IDs.
Least-privilege access to production data; audit logs on admin actions.

7. Your rights

Subject to applicable law (including the DPDP Act, 2023), you may:

Access the personal data we hold about you.
Correct inaccurate data via the in-app onboarding wizard or Settings.
Request deletion of your account and personal data (subject to retention obligations above).
Withdraw consent for processing (may limit the Service’s functionality).
Nominate a person to exercise these rights in the event of incapacity.
Raise a grievance — see /contact.

8. Cookies & analytics

We use essential cookies (session, authentication) and privacy-respecting analytics. We do not run cross-site advertising trackers.

9. Children

The Service is intended for medical practitioners and is not directed to persons under 18. We do not knowingly collect personal data from children.

10. Changes to this policy

We’ll notify you of material changes via email or an in-app banner. The “Last updated” date at the top reflects the most recent revision.

11. Contact / data requests

Data protection / grievance officer: Doctor Digital Identity Platform, HUMANITYFIRST SOFTWARE TECHNOLOGY PRIVATE LIMITED, A-803 Palatial Height, Chandivali Farm Road, Andheri, Mumbai, Maharashtra 400072, India. Phone: +91 7722090290. Please mark data requests as such in the subject line.