Privacy policy

Last updated 30 October 2026

This policy explains what Avam Innovation collects and how we use it. It covers two kinds of data: data about you, the business using DeskMitra, and data about your clients and patients that you keep in it.

Data about you

• Your name, WhatsApp number and business details, so you can sign in and the service can run.
• Your plan and payments. Card and UPI details are handled by Razorpay; we never see or store them.
• Basic logs (like when you sign in) to keep the service secure.

Data about your clients and patients

When people message your business on WhatsApp or you add them, the app stores their name, number, bookings and the notes, files and prescriptions you record. For this data, your business decides why and how it is used (under India's Digital Personal Data Protection Act, 2023, you are the "data fiduciary"). We process it only on your instructions, to run the service for you.

• We never sell it, and never use it to advertise to anyone.
• We never message your clients except the messages your business sets up (bookings, reminders and the like).
• In a clinic, receptionists don't see visit notes or health details. Only the owner and doctors do.
• Reminders can be set to say only "your appointment", without naming the treatment.

Who else handles data

• WhatsApp (Meta) carries the messages between your business and your clients.
• Razorpay takes payments for our plans.
• AI service (Google Gemini or Anthropic Claude): typed messages from clients may be sent to it only to understand what they are asking for, like which service and day. When a doctor uses voice notes, or a client sends a voice message, the recording is sent to Google Gemini to be written out as text. Recordings are not kept: only the text the doctor saves. We use the paid service, which does not use this data to train its models. Saved notes and files are never sent for any other purpose.
• Our hosting provider stores the data on secure servers.

How long we keep it

We keep data while your account is active. If you close your account, we delete your business's data within 90 days, unless the law requires us to keep something longer. Doctors may have to keep patient records for a set period under their professional rules; it's your choice when to delete them.

Your clients' rights

People can ask your business to see, correct or delete their data. You can do this in the app: every client's file has a delete option. Anyone can reply STOP to stop reminders and offers.

Security

Sign-in is by one-time codes on WhatsApp, data is sent over encrypted connections, and each business can only see its own data.

Contact and grievances

Questions, requests or complaints: email [support email]. We reply within 7 days. Avam Innovation, [Registered address].