Legal & policies

This policy explains what personal data DataYantra collects through datayantra.com and the Rx Connect brand portal, why we use it, who we share it with, and the rights you have under the Digital Personal Data Protection Act, 2023 (DPDP Act).

1. Who we are

DataYantra (“we”, “us”) is the Data Fiduciary for the personal data described here. Registered office: SP-003, Sector 116, Noida, Uttar Pradesh 201301, India. Contact: info@datayantra.com.

2. Whose data this covers

• Website visitors and enquirers who use our contact form.
• Brand users: staff of e-commerce brands who create Rx Connect accounts.
• Customers and patients: people who buy prescription-only products from a brand that uses Rx Connect, and the patient if that is someone else. Brands send us their details so a doctor can consult them.

3. What we collect

Health data. Allergies, ordered medicines, consultation recordings and prescriptions are health-related data. We collect only what a doctor needs to decide on a prescription for the products in the order. We do not collect payment card details; payments for orders are handled by the brand.

4. Why we use it

We do not sell personal data, and we do not use patient data for advertising.

5. Who we share it with

• The brand you ordered from: only what it needs to handle your order (the outcome, approved products and, if declined, the reason). Our internal notes are never shared with brands.
• Registered medical practitioners who consult you: your patient and order details.
• Service providers acting on our instructions: Supabase (database hosting); Knowlarity (masked calling and recording), which receives only your number and an order reference, never your name or medicines; our SMS/WhatsApp provider; and our website hosting provider.
• Authorities, where required by law.

6. How long we keep it

• Call recordings, e-prescriptions and consultation records: 3 years from the consultation, or longer if the law requires.
• Brand account data: the life of the account plus 3 years.
• Website enquiries: 2 years, or earlier if you withdraw consent.
• Consent records: as long as the related data is kept, as proof of consent.

After this, we delete or anonymise the data.

7. Where it is stored

Your data is stored on servers operated by Supabase in the European Union (Ireland). Transfers outside India are made in line with the DPDP Act and any restrictions notified by the Government of India.

8. Security

We use encrypted connections (HTTPS), hashed passwords, secure session cookies and role-based access. Only the treating doctor and authorised staff can see patient details and recordings, and every change to a request is logged. No system is perfectly secure; if a personal data breach affects you, we will inform you and the Data Protection Board of India as the law requires.

9. Your rights

• Ask for a summary of the personal data we hold about you and how it is used.
• Ask us to correct, complete or update your data.
• Ask us to erase data we no longer need, subject to legal retention such as medical records.
• Withdraw consent at any time. This does not affect anything done before. If you withdraw consent for an open order, we stop the consultation and tell the brand, which may then cancel the order.
• Nominate someone to exercise your rights if you die or become incapacitated.
• Raise a grievance with us, and then with the Data Protection Board of India.

To use these rights, email info@datayantra.com from the email or number linked to your data.

10. Children

Rx Connect consultations are for adults. If the patient is under 18, a parent or guardian must be the customer, give consent and be present for the consultation. We do not knowingly accept enquiries or brand accounts from people under 18.

11. Cookies

We use one essential cookie per area to keep you signed in: one for the brand portal and one for the admin panel. We do not use advertising or tracking cookies.

12. Changes

We may update this policy. The date at the top shows the latest version. Material changes will be announced on the website and, for brand users, by email.

13. Grievance Officer

Bhupesh Kathuria · info@datayantra.com · +91 81304 66141, +91 88514 82636 · SP-003, Sector 116, Noida, Uttar Pradesh 201301, India

See also our Teleconsultation & Call Recording Policy and Terms of Use.

These terms apply to datayantra.com and to accounts on our platform. By using the website or creating an account, you agree to them and to our Privacy Policy.

1. Agreement

These terms are an agreement between you and DataYantra. If you use the service for a business, you confirm you are authorised to accept these terms for it.

2. What we offer

We build AI and software for healthcare businesses, and operate products including Rx Connect, prescription support for e-commerce brands. The Rx Connect Brand Terms also apply to brands using Rx Connect.

3. Not medical advice

Content on this website is general information. It is not medical advice and is not a substitute for consulting a qualified doctor. In an emergency, call 112 or go to the nearest hospital.

4. Accounts

Keep your password confidential and tell us at once if you suspect misuse. You are responsible for activity under your account. We may approve, suspend or close accounts that break these terms or the law.

5. Acceptable use

You must not:

• submit false information, or anyone’s data without their consent;
• try to access other accounts or our systems without permission;
• interfere with the service or scrape it;
• use the service for anything unlawful.

6. Intellectual property

The website, software, designs and content belong to us or our licensors. You may not copy, modify or resell them without written permission. Product names belong to their respective owners.

7. Third-party links

Links to other sites, such as Google Play, are for convenience. We are not responsible for their content or practices.

8. Availability

We work to keep the service available but do not guarantee it will be uninterrupted or error-free. We may change or discontinue features.

9. Liability

To the extent the law allows, we are not liable for indirect or consequential losses. Our total liability for any claim relating to the website is limited to the fees you paid us in the 12 months before the claim. Nothing limits liability that cannot be limited by law.

10. Indemnity

You agree to compensate us for losses caused by your breach of these terms or misuse of the service.

11. Governing law

These terms are governed by the laws of India. Courts at Gautam Buddh Nagar (Noida), Uttar Pradesh have exclusive jurisdiction.

12. Changes

We may update these terms. Continuing to use the service after an update means you accept it.

13. Contact

info@datayantra.com · +91 81304 66141, +91 88514 82636 · SP-003, Sector 116, Noida, Uttar Pradesh 201301, India

This explains what happens when you order a prescription-only product from a brand that uses DataYantra Rx Connect: why you get a call, what you agreed to, and how your consultation is recorded.

1. Why you get a call

Some products need a valid prescription. Instead of asking you to upload one, the brand holds your order and we arrange a short phone consultation with a registered medical practitioner.

2. What you agreed to at checkout

Before you placed the order, the brand asked you to agree to this:

I agree to a teleconsultation with a registered medical practitioner arranged by DataYantra for the prescription products in my order. I authorise DataYantra, its doctors and its service providers to call me and send me SMS/WhatsApp messages on the mobile number I have provided about this order and its prescription, even if this number is registered on the National Customer Preference Register (NCPR/DND). I agree that the consultation call may be recorded for quality, medical and legal purposes.

We store this wording with the time you agreed, as proof of your consent.

3. The call

You will receive a call from a masked (virtual) number, so neither you nor the doctor sees the other’s personal number. The doctor will ask about your health, any allergies and current medicines, and the products ordered. Please answer honestly; the doctor’s decision depends on it. If the patient is someone else, the patient (or, for a minor, their parent or guardian) should take the call.

4. The doctor decides independently

The doctor may approve all products, approve only some, change them, or decline. Neither DataYantra nor the brand can override this decision. Approval depends only on the doctor’s clinical judgement, not on the length of the call.

5. If you miss the call

We will try again and may message you with a callback number. If no consultation happens within 24 hours, the brand will be told the prescription could not be obtained and will normally cancel and refund the order.

6. Recording

Calls are recorded for quality, medical and legal purposes. Recordings are stored securely, can be accessed only by the treating doctor and authorised compliance staff, and are kept for 3 years from the consultation.

7. Limits of teleconsultation

A phone consultation has limits: the doctor cannot examine you physically. The doctor may decline if a remote consultation is not appropriate and may advise you to see a doctor in person. This service is not for emergencies. In an emergency, call 112.

8. Withdrawing consent

You can withdraw consent at any time by telling the doctor on the call or emailing info@datayantra.com. The consultation will stop and the brand will be told so it can cancel your order.

9. Your data

See our Privacy Policy for how your data is used and the rights you have.

These terms apply between DataYantra and any brand that registers for Rx Connect, in addition to our Terms of Use and Privacy Policy.

1. Service

Rx Connect lets the brand send orders containing prescription-only products to DataYantra. We arrange a teleconsultation with a registered medical practitioner and report the outcome to the brand.

2. Account approval

New brand accounts are reviewed before they can submit requests. We may refuse or suspend accounts, for example for incorrect information, misuse or legal concerns.

3. Brand obligations

• Show our customer consent text at checkout, word for word (as provided in the dashboard), and submit a request only when the customer has ticked it. See the Teleconsultation & Call Recording Policy.
• Provide accurate customer and patient details, and only the products that need a prescription.
• Hold each submitted order (do not pack or ship it) until you receive the outcome.
• Act on the outcome:

• Comply with all laws that apply to selling your products, including drug, consumer-protection and e-commerce rules. The brand remains the seller of the products.

4. Our obligations

We will arrange consultations with registered practitioners, keep records of consent, calls and outcomes, protect personal data as described in our Privacy Policy, and make outcomes available to the brand without undue delay.

5. No guarantee of approval

Prescription decisions are made solely by the treating doctor. We do not guarantee that any order will be approved, and we are not liable for lost sales from a decline or an unobtained prescription.

6. Data protection

Each party is responsible for its own compliance with the DPDP Act. The brand must have the customer’s consent before sending us their data. We will use that data only to provide the service.

7. Fees

Fees, invoicing and payment terms are as agreed in writing between DataYantra and the brand.

8. Confidentiality

Each party keeps the other’s non-public business information confidential.

9. Suspension and termination

Either party may end the service with 30 days’ written notice. We may suspend immediately for breach, misuse or legal risk. Open requests at termination will be completed or cancelled as agreed.

10. Liability

Each party’s total liability is limited to the fees paid in the 12 months before the claim, except for breach of confidentiality, data protection obligations, or liability that cannot be limited by law.

11. Governing law

These terms are governed by the laws of India. Courts at Gautam Buddh Nagar (Noida), Uttar Pradesh have exclusive jurisdiction.