Privacy Policy

Effective 9 August 2026

1. What data we collect

Doctor account data. When a doctor signs up or uses DocTeam, we collect their name, email, phone number, specialty, city, clinic details, login credentials, and billing information (payments are processed by our payment gateway, Razorpay — we do not store card numbers).

Patient communication data — processed on the doctor's behalf. The platform helps a doctor manage enquiries and communications from their own patients (for example, an enquiry name, contact number, and message). For this data, the doctor is the data fiduciary and DocTeam acts only as a data processor, handling it on the doctor's instructions solely to deliver that doctor's communications. We do not use patient data for our own purposes.

Usage data. Basic technical/session information needed to run the service securely.

1a. If you started and did not finish

What we keep. If you typed your name and your speciality and city on our start page but did not complete signup, we save exactly those answers — nothing else. No phone number, no email address, and no browsing or device record.

Why. So we can follow up with you about your website.

How long, and how to remove it. We keep it until you ask us to delete it — we do not delete it on a timer, and we do not delete anything automatically. Email or WhatsApp us and we will remove it promptly; you do not need an account to ask. If you later sign up and then ask us to erase your data, this earlier entry is erased with the rest.

2. Why we use it (purpose)

We use data only to operate and provide the service: to run each doctor's account, draft and manage their marketing content, help them manage patient enquiries and communications, process subscription billing, provide support, and keep the platform secure. We use it for no other purpose.

3. Where your data is stored — in India

Data is hosted on Fly.io, on a persistent volume in the Mumbai (India) region — your data is stored in India. Each doctor's site, along with the patient bookings and enquiries the doctor receives, is written to a SQLite database file on that volume. Data is encrypted in transit; the volume is encrypted at rest. Access is restricted to authorised systems and personnel who need it to run the service.

4. We never sell your data

We do not sell, rent, or trade personal data — doctor data or patient data — to anyone. We share data only with the infrastructure providers strictly needed to run the service (for example our hosting provider Fly.io and our payment gateway Razorpay), under their own security and privacy obligations, and only where required by law.

5. Your rights under the DPDP Act 2023

You have the right to access the personal data we hold about you, to ask us to correct or complete it, and to ask us to erase it when it is no longer needed. Where we rely on your consent, you may withdraw it at any time. We process personal data only for the purposes described above (purpose limitation) and keep it only as long as needed to provide the service or meet a legal requirement.

6. Grievances & contact

For any privacy question, request, or grievance — including to exercise the rights above — write to us at hello@docteam.in. We will respond within the timelines expected under the DPDP Act.

Grievance Officer: Devansh Kakar — hello@docteam.in (named per SPDI Rule 5).

7. Changes to this policy

If we update this policy, we will post the revised version on this page with a new effective date. Continued use of the service after an update means you accept the updated policy.