Privacy Policy

Elvanic is a clinic communication platform that sends automated appointment confirmations and reminders to patients on behalf of healthcare clinics, using the WhatsApp Business Platform.

In relation to patient data, Elvanic acts on behalf of, and under the instructions of, the clinics that use our platform. Clinics remain responsible for their relationship with their patients.

Questions about this policy? Email us at privacy@elvanic.com.

From clinic owners (our customers)

• →Full name and clinic name
• →Mobile number — used for OTP login
• →Email address
• →Clinic type and city
• →Payment info — processed by Razorpay, we never store card details

From patients (added by clinic staff)

• →Patient name and mobile number
• →Appointment date, time, and doctor name
• →Message delivery status (sent / delivered / read)
• →Patient reply — YES, NO, or custom text

Automatically collected

• →IP address and device type — for security only
• →Login timestamps
• →Feature usage logs — to improve the product

• →Send automated WhatsApp appointment reminders to patients on behalf of clinics
• →Authenticate clinic staff via OTP login
• →Display appointment and message logs in your dashboard
• →Process subscription payments via Razorpay
• →Send transactional emails — account confirmations, billing receipts
• →Improve product features and fix bugs
• →Respond to support requests

We do not sell, rent, or trade your data, or your patients' data. We share data only with service providers who help us operate Elvanic, and only to the extent necessary:

These providers are permitted to use your data only to perform the services we ask of them, and are governed by their own privacy policies.

Your clinic controls its relationship with its patients and decides what patient information to add to Elvanic. Elvanic processes that information only as instructed by your clinic, and only to provide the appointment communication service you have signed up for.

We retain clinic account data for as long as your account remains active, and patient and appointment data for as long as needed to provide the service to your clinic.

• →If your account is cancelled, we will delete or anonymise your data within a reasonable period, unless we are required to retain it for legal, accounting, or dispute-resolution purposes
• →Message delivery logs are retained to support your dashboard and reporting, and are deleted or anonymised when no longer needed
• →One-time passwords (OTPs) are short-lived and are not retained beyond what is needed to complete login

If you would like more detail on how long specific data is kept, or would like to request earlier deletion, contact us at privacy@elvanic.com.

• →Data is transmitted over HTTPS (TLS encryption)
• →Authentication data is handled using industry-standard security practices.
• →Credentials used to connect your clinic's messaging services are protected using appropriate security measures
• →Access to production systems is limited to authorised personnel only

No system can be guaranteed 100% secure. In the event of a data breach affecting your information, we will notify affected users as required under applicable law.

If you are a clinic account holder, you have the right to:

• →Access the account and billing data we hold about you
• →Request correction of inaccurate account information
• →Request deletion of your account, subject to any records we are required to keep for legal, accounting, or dispute-resolution purposes
• →Ask us questions about how your clinic's data is processed

If you are a patient, Elvanic does not have a direct account relationship with you. Your clinic controls your appointment information and is your first point of contact for any request relating to it, including correction or deletion. If you contact us directly, we will forward your request to the relevant clinic and assist them as needed.

To exercise any of these rights, email privacy@elvanic.com. We will respond within a reasonable time.

Elvanic uses only the cookies necessary for authentication — to keep you securely logged in. We do not use advertising cookies or tracking pixels.

We may update this policy from time to time. If we make a material change, we will provide reasonable notice to active accounts, for example by email or a notice within the dashboard, before the change takes effect.