Privacy Policy

Your data, and how we handle it

This policy explains what personal data CuraGo collects, why we collect it, and the choices you have. It is written to align with India's Digital Personal Data Protection Act, 2023 (the "DPDP Act").

Last updated: 2026

1. Information we collect

We collect only what we need to run the service you asked for:

• Account details — your name, email address, phone number, and password (stored in hashed form). If you sign in with Google, we receive your name, email, and profile photo from Google.
• Practice information — clinic name, specialty, qualifications, registration number, services, photos, and any content you add to your CuraGo website. If you upload a CV for Zero To Practice Builder, we extract qualification and specialty details from it; the raw file and the extracted fields are stored separately, and you can delete either.
• Booking data — appointment details created through your CuraGo site. Where patients book with you, limited patient contact details may pass through our systems on your behalf.
• Payment information — processed by our payment partner, Razorpay. We do not store your full card or bank details on our servers; we retain only a transaction reference and status.
• Usage and device data — pages visited, actions taken, IP address, browser type, and similar technical logs used to keep the service secure and working.

2. How we use your information

We use your data to:

• Create and operate your account and clinic website.
• Process bookings and send related notifications (email or WhatsApp) that you or your patients expect.
• Take payment and issue receipts.
• Provide the Zero To Practice Builder programme, including progress tracking and reminders you opt into.
• Provide support, fix problems, and improve the product.
• Send you service and account messages. We send marketing messages only where you have agreed to receive them, and you can opt out at any time.
• Meet legal, tax, and regulatory obligations.

Under the DPDP Act, we process your data on the basis of the consent you give when you sign up, or for legitimate uses such as fulfilling a service you requested.

3. Data storage and security

Your data is stored on managed cloud infrastructure with access controls, encryption in transit (HTTPS), and encryption at rest where supported. Passwords are stored only as salted hashes. Access to production data is limited to personnel who need it to operate the service. No method of storage or transmission is perfectly secure, but we take reasonable technical and organisational measures to protect your information and we review them regularly.

4. Sharing and third parties

We do not sell your personal data. We share data only with service providers who help us run CuraGo, and only to the extent needed:

• Razorpay — to process payments securely. Razorpay handles your card and bank details under its own privacy terms.
• Google (OAuth) — if you choose "Continue with Google", Google authenticates you and shares basic profile details with us.
• Hosting and infrastructure providers — to store data and serve the application.
• Communication providers — to send transactional email and WhatsApp/SMS notifications on your behalf.

We may also disclose information if required by law, to protect our rights or users, or as part of a merger or acquisition (in which case we will notify you).

5. Your rights

Under the DPDP Act, you have the right to:

• Access a summary of the personal data we hold about you and how we process it.
• Correct or update data that is inaccurate or incomplete.
• Erase your data where it is no longer needed and there is no legal reason to keep it.
• Withdraw consent at any time, with the same ease as giving it (this does not affect processing already carried out).
• Grievance redressal — raise a complaint with our Grievance Officer (see below), and escalate to the Data Protection Board of India if unresolved.

To exercise any of these rights, email us at support@curago.in.

6. Data retention

We keep your personal data for as long as your account is active and for a reasonable period afterwards to meet legal, tax, and accounting requirements. When data is no longer needed and we are not required to retain it, we delete or anonymise it. You may ask us to delete your account and associated data at any time.

7. Cookies

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the service is used so we can improve it. You can control cookies through your browser settings; disabling some cookies may affect how the site works.

8. Children

CuraGo is intended for medical professionals and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us data, contact us and we will delete it.

9. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the date above and, where appropriate, notify you. Continued use of CuraGo after an update means you accept the revised policy.

10. Contact and Grievance Officer

← Back to CuraGo