Privacy Policy

1. Information We Collect

We collect information directly from you through our digital platforms and clinical workflows:

• Patient Profile & Registration Details: Full legal name, date of birth / age, gender, residential address, mobile telephone number, email address, profession, and referral source.
• Medical & Dental History: Chief complaints, reported dental concerns, pre-existing general medical conditions (e.g. diabetes, hypertension, cardiac disorders, asthma, bleeding disorders, pregnancy status), current medications, allergies, and patient-uploaded diagnostic files (such as intraoral photographs, previous prescriptions, and dental X-rays).
• Appointment Request Records: Requested appointment date, time session, requested treatment category, clinical notes, submission timestamps, and subsequent administrative workflow states (e.g. Pending, Confirmed, Completed, Cancelled).
• Account Security Credentials: Cryptographically hashed passwords for patient portal access. We do not store plaintext passwords.
• Information Voluntarily Shared with the AI Assistant (Duhita AI): Transcribed spoken audio or typed chat queries relating to oral symptoms, questions about dental procedures, and appointment inquiries.
• Technical, Log & Cookie Information: Standard server access logs, IP addresses, browser types, device screen resolutions, and performance cookies used to maintain portal sessions, preserve chosen interface language, and secure against automated abuse.

2. How We Use Your Information

All collected information is used strictly for legitimate healthcare, clinical operational, and communication purposes:

• To register your patient record in the clinic database prior to your arrival, saving front-desk administrative delays.
• To enable authorized clinical administrators and dentists to review appointment requests manually and determine doctor availability.
• To communicate with you via phone call, SMS, or WhatsApp regarding appointment confirmations, schedule changes, or follow-up oral care instructions.
• To maintain your electronic health record, including past clinical treatments, digital prescriptions, and radiographic scans.
• To ensure safe clinical treatment planning, accounting for contraindications, medical allergies, and medication interactions.
• To process and answer general dental health queries via our digital assistant.

3. Third-Party Service Providers & External AI Processing

We believe in complete transparency. We do not sell, rent, or trade your personal information to data brokers or advertising networks. However, to provide modern web functionality and interactive services, certain data is processed through trusted third-party technical providers:

• Third-Party Large Language Models (LLM Providers): When you communicate with our AI assistant (“Duhita AI”), your typed or spoken text query is transmitted via secure HTTPS API to external cloud artificial intelligence providers (including Google Gemini, Groq, and OpenRouter API infrastructures) solely to generate conversational guidance in English or Telugu. Please do not transmit sensitive government identification numbers or unnecessary financial information in the AI chat.
• Speech Recognition & Voice Synthesis Engines: Spoken voice recordings captured through the microphone are converted into text and speech audio using browser-standard Web Audio APIs and cloud speech engines.
• Cloud Hosting, Database & VPS Infrastructure: Our web servers, database storage, and secure patient portals are hosted on encrypted virtual private server (VPS) infrastructure with strict access controls.
• Telecommunication Channels: Transactional SMS or direct WhatsApp communications regarding appointment approvals are routed through secure telecommunication carriers.

4. Clinical Confidentiality & Data Security

Patient data is maintained in accordance with recognized medical ethics and healthcare data confidentiality standards in India. Digital records are protected by role-based access control, requiring authorized clinic credentials. Passwords are encrypted using modern hashing algorithms, and data transferred over the web is protected with SSL/TLS encryption.

5. Data Retention & Patient Rights

As a dental healthcare facility, we are required under applicable medical regulations and clinical guidelines to maintain patient treatment histories, prescriptions, and radiographs for statutory minimum periods.

You have the right to inspect your personal contact details, review uploaded medical documents through your patient account, update erroneous information, or request account closure subject to medical record retention laws.

6. Contacting Our Data Privacy Team

If you have questions, concerns, or requests regarding this Privacy Policy or how your health data is handled, please contact our clinic directly: