Privacy Policy

Last Updated: August 25, 2026

Welcome to the digital portal of Aghosh HealthTech Solutions and Dr. Aghosh B Prasad (“we”, “our”, “us”). We are committed to protecting your privacy and ensuring the utmost confidentiality of personal and clinical data. This Privacy Policy details our data practices when you visit our website (https://aghosh.in) or utilize our healthcare software, appointment scheduling engines, and automated communication tools (the “Services”).

1. Information We Collect

Depending on how you interact with our Services, we may collect the following categories of information:

• Appointment & Scheduling Data:When booking an appointment or consultation through our web booking widget or social bio links, we collect essential details including the patient's name, phone number, email address, consultation mode (in-person vs. video call), preferred slot time, and brief consultation reason.
• Contact & Inquiry Data: When submitting forms on our website, we collect your name, email, phone number, organization name, and inquiry details to respond to your service requests.
• Healthcare Professional & Clinic Data: When onboarding doctors and clinics to our scheduling and automated messaging backends, we collect practitioner credentials, clinic location details, consultation schedule availability, and authorized calendar IDs.
• Technical & Usage Information: Standard server logs including IP address, browser type, operating system, referring pages, and device diagnostic metrics to ensure system uptime and security.

2. How We Use Your Information

We process data exclusively for legitimate operational, clinical management, and administrative purposes:

• To facilitate real-time appointment scheduling and calendar conflict resolution.
• To dispatch transactional appointment confirmations, Google Meet telemedicine links, clinic location pins, and automated reminder alerts (T-24h and T-1h).
• To provide clinic practitioners with accurate schedule overview and patient intake notes.
• To maintain system performance, data integrity, and compliance with medical informatics best practices.
• To respond to client inquiries and provide technical support.

3. Third-Party Integrations & Communication Platforms

To deliver frictionless, modern healthcare experiences, we integrate with trusted third-party cloud platforms under strict privacy safeguards:

• Meta & WhatsApp Cloud API:We utilize official Meta WhatsApp Cloud API integrations and authorized WhatsApp Business pipelines to deliver transactional utility notifications (e.g., booking confirmations, rescheduling options, and video consultation links). Message content is strictly limited to transactional appointment data and is governed by Meta's Business Data Policy.
• Google Calendar API & Google Meet: When authorized by the practitioner, our backend interacts with Google Calendar APIs to query free/busy availability and create calendar events containing automated Google Meet conference rooms. We do not read or store private calendar events unrelated to clinic appointment schedules.
• Email Service Providers: We use secure email infrastructure (such as EmailJS or Google Workspace) for contact form processing and automated email calendar invitations.

4. Strict No-Sale & Data Sharing Policy

We do not sell, rent, or monetize personal or health-related data under any circumstances. Data is never shared with third-party advertisers or data brokers.

Data is only shared when strictly required to:

• Deliver authorized services requested by the user or clinic (e.g., dispatching WhatsApp alerts via Meta or creating events in Google Calendar).
• Comply with applicable legal processes, court orders, or statutory obligations.
• Protect the safety, rights, and security of patients, healthcare professionals, and our digital infrastructure.

5. Data Security & Clinical Safeguards

We implement industry-standard administrative, physical, and technical safeguards to protect data against unauthorized access, loss, alteration, or disclosure:

• All web traffic and API endpoints are encrypted in transit using Transport Layer Security (TLS/HTTPS).
• API keys, OAuth tokens, and sensitive credentials are encrypted and stored in secure backend environments.
• Minimal data retention principles are enforced — appointment logs and temporary session payloads are pruned after fulfillment.

6. Your Data Rights

Depending on your jurisdiction, you have fundamental rights regarding your personal information:

• Access & Review: You may request copies of the personal data we hold about you.
• Rectification: You may ask us to update or correct inaccurate or incomplete information.
• Erasure: You may request the deletion of your personal data, subject to statutory medical record keeping requirements.
• Opt-Out of Notifications: You can opt out of automated WhatsApp or email reminders at any time by replying directly with “STOP” or contacting the clinic.

To exercise any of these rights, please contact us at [email protected].

7. User Data Deletion Instructions (Meta / WhatsApp Platform)

In accordance with Meta Developer Platform policies and data privacy regulations, users may request the complete deletion of their personal data, appointment history, or connected WhatsApp session records at any time. For detailed step-by-step instructions, please review our dedicated User Data Deletion Instructions Page or send a request to [email protected].

8. Children's Privacy

When pediatric appointments are booked via our Services, all appointment data must be submitted by a parent, legal guardian, or authorized healthcare professional. We do not knowingly collect personal information directly from unsupervised children under the age of 18.

9. Updates to This Privacy Policy

We may periodically update this Privacy Policy to reflect system improvements or regulatory changes. The updated version will be indicated by the “Last Updated” date at the top of this page.

10. Legal Entity & Contact Details

If you have questions, feedback, or privacy concerns regarding this policy, please reach out to our legal and data protection representative: