Privacy Policy

1. Information we collect

We collect information needed to operate a business-to-business pharmaceutical marketplace, verify business accounts, process orders, and protect the platform. Depending on the features you use, this may include:

• Account and contact details: name, user ID, email address, phone number, business name and business type.
• Business and regulatory details: business address, city, state, PIN code, GST details, drug-licence details, PAN or other registration details where requested, authorised-signatory information, uploaded verification documents, document metadata, and verification status.
• Orders and payments: products and quantities ordered, purchase and order history, shipping details supplied at checkout, wallet and ledger entries, order amounts, payment-provider order and transaction identifiers, payment status, and payment-verification results.
• Support communications: messages you send through support features and the recent conversation text needed to respond. If you choose voice input, your device or platform speech-recognition service may process microphone audio to produce text. The app does not intentionally store raw voice recordings on the MediDeals® application server.
• Technical and security records: limited request, timestamp, application, and security information generated while operating and protecting the service.

Please do not upload patient records or include passwords, one-time passwords (OTPs), payment-card details, or confidential identity documents in support chat.

2. How we use information

• Create and manage accounts, authenticate users, and provide account support.
• Review business registrations and regulatory documents, apply access controls, and support compliance and fraud prevention.
• Display catalogue and vendor offers, manage carts, place and track orders, calculate order totals, reconcile payments, and maintain invoices and transaction records.
• Obtain courier-rate estimates when that feature is enabled, and provide customer support.
• Maintain, secure, troubleshoot, and improve the service.

MediDeals® is a B2B trade platform, not a patient-record service. Do not submit personal medical records or patient-specific health information.

3. When information is shared

We do not sell personal information. Information may be processed or transferred in the following limited circumstances:

• Payment processing: Razorpay or another configured payment processor receives the payment-order information needed to process and verify a transaction. Payment methods such as cards, UPI, or bank payments are handled by the payment provider. MediDeals® stores transaction references, amounts, and statuses; it is not designed to store full payment-card credentials.
• AI support: when AI-powered support is enabled, the message you submit and relevant recent conversation text may be sent to the configured AI service, including Google AI services, to generate a response. Processing and retention depend on the service and account tier in use. Do not include passwords, OTPs, payment credentials, or confidential licence documents in these messages.
• Voice-to-text: if you activate voice input, the device or platform speech-recognition service handles the audio needed to transcribe your speech. The resulting text is shown for your review before you send it as a support message.
• Orders and vendors: when you place an order, the seller responsible for that order receives the order and business details needed to process the transaction. This may include the products and quantities ordered and relevant business or destination details.
• Courier estimates: when live courier-rate lookup is enabled, the configured courier-rate provider, including Shiprocket where configured, may receive the destination PIN code, estimated package weight, and declared order value to return available rates. A rate lookup does not itself book or dispatch a shipment.
• Operational service providers: hosting, storage, communications, security, and other providers may process information on our behalf to operate the platform, subject to their applicable terms and instructions.
• Legal and safety requirements: information may be retained or disclosed when reasonably necessary to comply with applicable law, resolve disputes, enforce platform terms, or protect users and the service.

Wholesale prices, supplier discount tiers, and internal billing references are restricted to authorised B2B functionality and are not intended to be exposed to unauthorised visitors.

4. Security

We use HTTPS/TLS to protect information transmitted between the app, website, and service endpoints. Account passwords are hashed rather than stored as readable passwords, and authenticated API access and role-based checks are used to restrict access. No method of transmission or storage can be guaranteed completely secure, and this policy does not claim that every stored document or database record is end-to-end encrypted.

5. Retention and deletion

We retain information for as long as needed to provide the service, manage accounts and transactions, protect against fraud, resolve disputes, and meet applicable accounting or regulatory obligations. Orders, invoices, payment records, verification records, and audit history may need to be retained even after an account is closed.

The current account-deletion operation marks an account as deleted, replaces its registered email address and phone number, replaces its password with a random value, and revokes its API access tokens. It does not automatically erase every associated business profile, address, licence or verification document, order, invoice, payment record, or audit record. You can ask support to review deletion of specific information without closing your account, or to identify records that may need to be retained and the reason.

A fixed retention schedule is not currently published. For a request about a particular account, contact support@medideals.co.in. We will verify account ownership and assess which records can be deleted and which may need to remain. See the account-deletion instructions.

6. Your choices and contact

You can choose whether to use optional features such as support chat, voice input, and document uploads. Required account and order information must be provided to use the corresponding account, verification, or transaction feature. You may request access, correction, or deletion review by emailing support@medideals.co.in from your registered email where possible. Include your user ID or registered phone number and business name, but do not send passwords or OTPs.

MediDeals® is intended for business users aged 18 and over.