Privacy Policy

1. Who we are

DoctorLib is operated by Bidwarriors Online Smart Solutions Pvt. Ltd. (“we”, “us”). We provide an online platform to search doctors, book appointments, make payments, and manage health-related records.

2. Data we collect

• Account data: name, mobile, email, password (stored as a secure hash).
• Patient profile: date of birth, gender, blood group, address, emergency contact.
• Health information: allergies, medical history, uploaded reports (PDF/images), appointment notes.
• Doctor data: registration number, specialization, KYC documents, clinic details.
• Hospital data: hospital name, address, admin contact.
• Transaction data: appointment fees, payment status, Razorpay reference IDs (we do not store full card/UPI details).
• Technical data: IP address, browser type, consent timestamps, audit logs for security.

3. How we use your data

• To create and manage your account.
• To book and manage appointments between patients and doctors.
• To share relevant health information with doctors you book with.
• To process payments and provide receipts.
• To verify doctor credentials before listing them.
• To comply with law and prevent fraud.

4. Sharing of data

We do not sell your personal data. We share data only:

• With doctors you choose to book — they see your profile and medical history for your care.
• With hospital admins for doctors linked to their hospital.
• With payment partners (e.g. Razorpay) to process transactions.
• When required by law or court order.

5. Storage & retention

Data is stored on secure servers in India. We retain data while your account is active and as required for legal, tax, and healthcare record purposes. You may request deletion (see Your Rights).

6. Security

• HTTPS encryption for all traffic.
• Password hashing (bcrypt).
• Role-based access — patients see only their data; doctors see only patients who booked with them.
• Prescriptions and medical files are not publicly accessible; downloads require login.

7. Your rights (India DPDP Act, 2023)

• Access and download your data from My Account → My Data.
• Correct inaccurate information in your profile.
• Withdraw consent and request account deletion.
• Contact us with privacy concerns at support@doctorlib.in.

8. Children

Our services are not directed at children under 18 without parental consent.

9. Changes

We may update this policy. Continued use after changes constitutes acceptance.