Privacy Policy

Indian data law (the Digital Personal Data Protection Act, 2023) uses two roles. A Data Fiduciary decides why and how personal data is processed. A Data Processor processes personal data only on a fiduciary's instructions. Medslots plays both roles, for different people.

• For clinic owners and staff who sign up and use Medslots, and for visitors to medslots.com, Medslots is the Data Fiduciary. This policy is our privacy notice to you in that role.
• For patients who message a subscribing clinic's WhatsApp number, the clinic is the Data Fiduciary. It is the clinic's patient, the clinic decides to use Medslots, and the clinic is responsible for telling its patients how their data is handled. Medslots acts as the clinic's Data Processor, processing that conversation data only to deliver the service the clinic has asked for.

From clinic owners and staff (our direct customers)

• Name, clinic name, phone number, email address, WhatsApp number.
• Business details needed to run the service: clinic address, services offered, pricing, and Google Business Profile access.
• Billing details processed through PhonePe (see “Payments” below). Medslots does not itself store your card, UPI, or bank details.
• Messages you send to the Medslots AI or team when using owner controls or support.

From patients, on behalf of a subscribing clinic

• Name, phone number, and the content of WhatsApp conversations with the clinic's AI receptionist: enquiries, appointment requests, and questions asked.
• Appointment details, such as the service requested and preferred time.
• Call metadata for missed-call recovery: number, time, and whether the call was answered.
• Review-related communication, where the clinic asks Medslots to request a Google review.

From website visitors

Contact-form or WhatsApp-click data: whatever you send us through the site's own contact links.

• To deliver the Medslots service a clinic has subscribed to: answering WhatsApp enquiries, booking, missed-call recovery, Google Business Profile updates, review requests, and reactivation messages.
• To operate owner controls, including letting the doctor or clinic staff take over any AI conversation at any time.
• To bill for the subscription and provide support.
• To comply with legal obligations, such as tax, accounting, and lawful requests from authorities.

Under the DPDP Act, 2023, our legal basis for processing is primarily consent (from the clinic owner when they sign up, and from patients when they message a clinic's WhatsApp number) and, for account and billing matters, the contract with the clinic for performance of the subscription.

We do not sell personal data. We share it only where needed to run the service, with:

• The WhatsApp Business Platform, to send and receive the messages that make up the service.
• PhonePe, to process subscription payments (see “Payments” below).
• Google, for Google Business Profile automation and posting review-related content, using access the clinic grants.
• Law enforcement or regulators, where legally required.

Subscription payments (₹4,999/month per clinic, plus ₹2,500/month per additional branch, no setup fee) are processed through PhonePe. Medslots does not store your full card number, UPI PIN, or bank credentials. PhonePe processes payment directly, under its own privacy policy and its own PCI-DSS obligations. We receive confirmation of payment status only.

If you are a clinic owner or staff member, or a website visitor (that is, where Medslots is the Data Fiduciary for your data), under the DPDP Act, 2023 you have the right to:

• Get a summary of what personal data we hold about you and how it's processed.
• Ask us to correct inaccurate or incomplete data, or update data that has become out of date.
• Ask us to erase data we no longer need for the purpose it was collected for.
• Withdraw consent at any time. This does not affect processing done before withdrawal, and may mean we can no longer provide the service.
• Nominate another individual to exercise these rights on your behalf, in the event of your death or incapacity.
• Raise a grievance with us and, if it remains unresolved, escalate it to the Data Protection Board of India.

To exercise any of these rights, contact us at hello@medslots.com or +91 91615 66676 (call or WhatsApp, 24×7).

If you are a patient who has messaged a clinic using Medslots, please first raise your request with that clinic directly, since the clinic is responsible for your data as the Data Fiduciary.

The DPDP Act, 2023 requires verifiable consent from a parent or lawful guardian before processing a child's (under 18) personal data, with a limited exemption for clinical establishments and healthcare professionals processing data to provide care.

Indian law requires us to name a real person who handles complaints about this policy, not just a general inbox. We are in the process of appointing one.

Until then, you can reach us directly at hello@medslots.com or +91 91615 66676 (call or WhatsApp, 24×7).

We may update this policy from time to time. We will post the revised version on this page with a new “Last updated” date.

Letex Media Co.
L47 Jankipuram Garden, Gaurabagh, Lucknow, Uttar Pradesh 226021, India

Email: hello@medslots.com
Phone / WhatsApp (24×7): +91 91615 66676

This policy is written from confirmed product and company facts and Indian legal sources current as of 17 Sep 2026. Where a fact was not yet confirmed, we marked it clearly rather than guess. See our Terms of Service and Refund and Cancellation Policy for related terms.