Privacy Policy

1. Who We Are

MediNITS is a SaaS clinic management platform operated by Marketers Data Solution Pvt Ltd, incorporated in India. Contact: admin@medinits.com | +91 9663769576

2. Data We Collect

Account data (we store): Clinic name, doctor name, email, phone, city, GSTIN, subscription plan, payment confirmation ID. We do NOT store card numbers or UPI credentials.

Patient clinical data (we NEVER access): All patient records — names, medical history, prescriptions, invoices — are stored exclusively on YOUR device's browser localStorage and IndexedDB. Our servers never receive this data. If you enable Supabase backup, it goes to YOUR Supabase account which you control entirely.

Anonymised usage data: Browser type, general feature usage patterns. No personal or clinical data included.

3. How We Use Your Data

• Provisioning your account and sending login credentials
• Processing subscription payments and issuing GST invoices
• Providing technical support
• Anonymised product improvement analytics
• Legal compliance (GST Act, Income Tax Act, DPDP Act 2023)

We do NOT sell, rent, or share your personal data with third parties for marketing.

4. Patient Data — Special Protections

• Patient records encrypted in browser local storage
• Prescription PDFs generated entirely in your browser — nothing sent to our servers
• WhatsApp messages sent directly device-to-WhatsApp — we never see content
• DPDP Act 2023 compliant — you are the Data Fiduciary for your patients

5. Security

• AES-256 equivalent encryption for all session data
• SHA-256 password hashing — plaintext never stored in cloud
• Rate-limited login: 5 attempts → 15-minute lockout
• Session expiry and auto-logout
• HTTPS enforced via Cloudflare
• 6-layer redundant local backup
• HTTP security headers: X-Frame-Options, X-Content-Type-Options, Referrer-Policy

6. Third-Party Services

• Instamojo / Razorpay: Payment processing — they handle payment credentials, we only receive confirmation IDs
• Supabase (optional): Your own cloud database — we have no access
• Google Gemini / Groq (optional AI): Prompts sent when you configure your own API key — we do not handle or log this
• CallMeBot / Twilio (optional): Messaging — only if you configure it
• Cloudflare: Hosting — may log basic access metadata

7. Your Rights (DPDP Act 2023)

• Right to Access: Request copy of your account data — email admin@medinits.com
• Right to Correction: Request correction of inaccurate data
• Right to Erasure: Request deletion of your account within 30 days
• Right to Grievance Redressal: Contact Grievance Officer below

8. Data Retention

• Subscription and billing data: 7 years (GST compliance)
• Payment records: 8 years (Income Tax Act)
• Support correspondence: 3 years
• Patient clinical data: Stored only on your device — until you delete it

9. Cookies

The MediNITS app uses only browser localStorage and sessionStorage — no tracking cookies. Our marketing website uses minimal session cookies for functionality only. No advertising or analytics tracking cookies.

10. Changes

Material changes will be emailed to subscribers and reflected in the "Updated" date above. Continued use constitutes acceptance.

10a. No Refund Policy

All payments made to MediNITS (Marketers Data Solution Pvt Ltd) are strictly non-refundable. By completing a subscription payment, you explicitly agree to and accept this no-refund policy.

• Subscription fees are charged in advance for the period selected (monthly or annual). Once payment is processed, no refunds will be issued under any circumstances.
• This includes but is not limited to: change of mind, non-use of the platform, dissatisfaction with features, technical issues on the subscriber's device or network, or subscription cancellation mid-period.
• Plan upgrades are billed at the new rate from the next billing cycle. Downgrades do not result in refunds for the current paid period.
• In the event of a genuine payment dispute or duplicate charge, please contact admin@medinits.com within 48 hours of the transaction with your payment ID. We will investigate and resolve legitimate technical billing errors at our sole discretion.
• Chargebacks raised with banks or payment providers without first contacting us constitute a breach of these terms and may result in immediate account suspension.

10b. Medical Disclaimer — AI Prescriptions

MediNITS is a clinic management and administrative software platform. It is NOT a medical device and does not provide medical advice.

• Any prescriptions, drug suggestions, dosage recommendations, or clinical content generated by MediNITS (whether AI-assisted or manually created) are for clinical administrative reference only and are the sole professional responsibility of the treating physician who reviews, edits, and authorises them.
• AI-generated content within MediNITS is NOT valid for medico-legal proceedings and does not constitute a legally recognised medical document under the Indian Medical Council Act, Clinical Establishments Act, or any other applicable medical law or regulation.
• Marketers Data Solution Pvt Ltd, its directors, employees, and affiliates accept no liability whatsoever for any medical, clinical, pharmaceutical, or health outcomes arising from the use of any prescription, recommendation, or content generated through MediNITS.
• The treating physician bears full professional, ethical, and legal responsibility for all prescriptions issued to their patients, regardless of whether MediNITS tools were used in their preparation.
• MediNITS does not practice medicine. All clinical decisions must be made by a licensed medical professional in accordance with applicable standards of care.

11. Grievance Officer & Contact