DPDP Framework 2026 Compliant

MeddiChat Privacy Policy

Clear, transparent data protection policies for patients, healthcare providers, and clinic administrators.

LEGAL DOCUMENTATION

Data Protection & Privacy Notice

Last Updated: 17 August 2026

1. Introduction

MeddiChat (operated by MeddyList Digital Pvt. Ltd.) is an AI-powered communication and appointment-management platform that helps clinics, hospitals, doctors, and healthcare organizations manage patient communications, WhatsApp conversations, doctor information, and appointments.

This Privacy Policy explains how MeddiChat collects, uses, stores, protects, and processes personal information in accordance with India’s Digital Personal Data Protection (DPDP) framework.

2. Information We Collect

Depending on how MeddiChat is used, we process the following categories of data:

Account Information

  • Full Name & Title
  • Email Address
  • Mobile Number
  • Organization / Clinic Details
  • Login Credentials & Audit Tokens

Patient Information

  • Name & Contact Number
  • Preferred Language (English, Telugu, Hindi, etc.)
  • Doctor & Specialty Selected
  • Appointment Request History
  • Voluntarily Provided Clinical Context

WhatsApp Communication

  • Incoming & Outgoing Messages
  • WhatsApp Business Identifiers
  • Conversation IDs & Timestamps
  • Message Delivery & Read Receipts

Appointment Data

  • Doctor Specialty & Slot Time
  • Appointment Number & Confirmation Status
  • Consultation Type (In-Person / Online)
  • Rescheduling & Cancellation Logs

3. How We Use Information

We process data strictly for providing authorized healthcare communication services:

  • Create and manage healthcare accounts
  • Process WhatsApp patient conversations
  • Power AI receptionist responses & scheduling
  • Check doctor slot availability & book visits
  • Send WhatsApp appointment confirmations
  • Maintain platform security & prevent abuse

4. AI Processing Disclaimer

MeddiChat uses AI models (OpenAI GPT-4o & Local Private Ollama Nodes) to assist with administrative and receptionist tasks such as doctor discovery and appointment booking.

IMPORTANT: The AI assistant is NOT a doctor and must never be used as a substitute for professional medical advice, clinical diagnosis, or emergency healthcare services.

5. WhatsApp Integration

When a clinic connects a WhatsApp Business service to MeddiChat, incoming patient messages are routed securely through Meta WhatsApp Business APIs and MeddiChat’s encrypted backend infrastructure solely for servicing patient inquiries.

6. Sharing of Information

We do not sell, rent, or monetize patient information. Access is limited strictly to authorized entities:

  • The specific clinic or healthcare organization managing the patient.
  • Authorized doctors and clinic receptionists.
  • Meta WhatsApp Cloud API infrastructure.
  • Secure cloud hosting providers (GCP / AWS India regions).
  • Law enforcement or government bodies where mandated by applicable Indian law.

7. Data Security Safeguards

We enforce enterprise-grade security measures to protect healthcare information:

HTTPS / TLS 1.3 Encryption
Role-Based Access Control
API Bearer Authentication
Encrypted Database Storage
Audit Trail Logging
Daily Backup & Recovery
COMPLIANCE ARCHITECTURE

DPDP Patient Privacy & Consent Flow

Every WhatsApp interaction verifies active consent before processing patient data.

Patient ──(WhatsApp Message)──► MeddiChat Gateway
│
├──► [ Privacy / Consent Check Module ] ──(DB Check)──► `patient_consents` Table
│
├──► [ AI Receptionist RAG Engine ]
│
└──► [ Encrypted Storage: Patient Record | Conversations | Appointments ]

8. Rights & Contact Details

Under India’s DPDP framework, users and patients have rights to request data access, correction, consent withdrawal, or deletion.

MeddiChat / MeddyList Digital Pvt. Ltd.

Email: privacy@meddichat.com

Website: https://meddichat.com

Address: Uppal, Hyderabad, Telangana, India - 500039