Privacy policy

Last updated 30 October 2026

This policy explains what Avam Innovation collects and how we use it. It covers two kinds of data: data about you, the business using DeskMitra, and data about your clients and patients that you keep in it.

Data about you

• Your name, WhatsApp number and business details, so you can sign in and the service can run.
• Your plan and payments. Card and UPI details are handled by Razorpay; we never see or store them.
• Basic logs (like when you sign in) to keep the service secure.

Data about your clients and patients

When people message your business on WhatsApp or you add them, the app stores their name, number, bookings and the notes, files and prescriptions you record. For this data, your business decides why and how it is used (under India's Digital Personal Data Protection Act, 2023, you are the "data fiduciary"). We process it only on your instructions, to run the service for you.

• We never sell it, and never use it to advertise to anyone.
• We never message your clients except the messages your business sets up (bookings, reminders and the like).
• In a clinic, receptionists don't see visit notes or health details. Only the owner and doctors do.
• Reminders can be set to say only "your appointment", without naming the treatment.

Who else handles data

• WhatsApp (Meta) carries the messages between your business and your clients.
• Razorpay takes payments for our plans.
• AI service (Google Gemini or Anthropic Claude): typed messages from clients may be sent to it only to understand what they are asking for, like which service and day. When a doctor uses voice notes, or a client sends a voice message, the recording is sent to Google Gemini to be written out as text. Recordings are not kept: only the text the doctor saves. We use the paid service, which does not use this data to train its models. Saved notes and files are never sent for any other purpose.
• Cloudflare hosts the service: your data is kept in its database and file storage, encrypted, with backups that can restore it to any point in the last 30 days.

How long we keep it

We keep data while your account is active. If you close your account, we delete your business's data within 90 days, unless the law requires us to keep something longer. Doctors may have to keep patient records for a set period under their professional rules; it's your choice when to delete them.

Your data is yours

Nothing is kept only on your phone. If you change or lose your phone, sign in again and everything is there. If you get a new number, move your account to it in the app (More, then Your sign-in number); if you lose your old number completely, we can move it for you once we have checked it is really you. You can download all your data at any time (Settings, then Your data), to keep or to take elsewhere.

Your clients' rights

People can ask your business to see, correct or delete their data. You can do this in the app: every client's file has a delete option. Anyone can reply STOP to stop reminders and offers.

For a child (under 18), the parent or guardian gives the details and consent, and makes these requests.

Security

Sign-in is by one-time codes on WhatsApp, data is sent over encrypted connections, and each business can only see its own data. If a security incident ever affects your data, we will tell you without delay, and the Data Protection Board of India where the law requires it.

Contact and grievances

Questions, requests or complaints: write to our grievance officer, [grievance officer name], at [support email]. We reply within 7 days. Avam Innovation, [Registered address].