Privacy Policy

1. Data we collect

Account data: your name, phone, email, business details, and (for password login) a hashed password. Google sign-in shares your basic Google profile (name, email).

Business data you enter: patients/guests, doctors, medicines/stock, invoices, reservations and related records.

Usage data: basic logs needed to operate and secure the service.

2. How we use it

We use your data to provide and secure the service: authenticating you, showing your business its own data, processing payments, and improving reliability. We do not sell your data.

3. Patient and customer records

Records you enter belong to your business. Each account's data is isolated so one business cannot see another's.

You are the controller of the personal data of your patients/customers; Vyavan processes it on your behalf to run the features you use. You are responsible for having a lawful basis to collect it.

4. Payments

Payments are handled by our payment provider (Razorpay). We do not store your full card details; the provider processes them under its own security standards.

5. Storage and security

Data is stored in a managed PostgreSQL database. Access tokens are short-lived and session state can be revoked; passwords are stored only as salted hashes.

No system is perfectly secure, but we apply reasonable measures including tenant isolation, encrypted transport, and access controls.

6. Data sharing

We share data only with service providers needed to run Vyavan — for example hosting, database, payments and email delivery — and only to the extent required. We may disclose data where legally required.

7. Your choices

You can export your data as CSV from within the app at any time.

You can request deletion of your account and its data by contacting us. Some records may be retained where required by law.

8. Changes

We may update this policy and will note the date of the latest change above.