Quecli
FeaturesHow it worksPricingContact
PrivacyTermsCookies

Privacy Policy


Privacy Policy (DPDP Notice)


**Effective:** 1 June 2026 · **Operator:** Quecli Technologies Pvt. Ltd.


1. What data we collect

  • **Patient data** collected during WhatsApp booking: name, WhatsApp number, appointment reason. Collected on behalf of the clinic (your fiduciary).
  • **Clinic staff data**: name, email, phone number for portal access.
  • **Usage data**: log files, IP addresses, feature interactions.

2. Why we collect it

  • Send appointment reminders and confirmations via WhatsApp.
  • Enable the clinic to manage their appointment queue.
  • Provide analytics and operational reports to the clinic.

3. Consent

Patient consent is captured inline during the WhatsApp booking conversation before any data is stored. Patients may opt out at any time by replying STOP.


4. Data retention

Patient clinical records are retained in compliance with Indian Medical Council regulations (minimum 3 years from date of treatment), or as instructed by the treating clinic (your Data Fiduciary). Non-clinical interaction records are retained for 36 months from the last appointment. Deletion requests are honored subject to statutory medical retention obligations.


5. Your rights (DPDP Act 2023 & SPDI Rules 2011)

  • **Access**: Request a copy of your personal data.
  • **Correction**: Update inaccurate information.
  • **Erasure**: Request deletion of your data (subject to doctor's statutory record retention duties).
  • **Grievance**: Contact our designated Grievance / Data Protection Officer at dpo@quecli.app.

6. Sub-processors & data hosting

We do not sell data. We share data only with authorized sub-processors under written data processing agreements: Meta Platforms / WhatsApp (message delivery), Razorpay (payment processing), and cloud infrastructure providers located in India (AWS / Mumbai region). All patient records are hosted within Indian jurisdiction.


7. Security & incident reporting

Data is encrypted at rest (AES-256) and in transit (TLS 1.3). Access is logged for compliance auditability. Security incidents are reported to CERT-In and the Data Protection Board within statutory timelines.


8. Contact

Quecli Technologies Pvt. Ltd. · dpo@quecli.app