This Privacy Policy explains how FirstCareNow (“we”, “us”, the “Platform”), operated by Xphora AI Technology Pvt. Ltd. on the Dactorly telemedicine platform, collects, uses, discloses, and safeguards your information when you use our doctor directory and book consultations over WhatsApp. We process your data in accordance with India’s Digital Personal Data Protection Act, 2023 (DPDPA), the Information Technology Act, 2000 and its rules, and the Telemedicine Practice Guidelines, 2020.
1. Who is responsible for your data
Xphora AI Technology Pvt. Ltd. is the Data Fiduciary for the Platform. The registered medical practitioner (“Doctor” / “RMP”) you choose to consult is an independent practitioner responsible for the clinical record of your consultation. For any privacy question or request, contact our grievance contact at support@firstcarenow.com.
2. Information we collect
- Identity & contact: your name, age, and WhatsApp/phone number.
- Booking details: the specialty or doctor you select, your preferred time, and the chief complaint / reason for consultation you share to be connected to the right doctor.
- Payment information: processed by our payment partner (Razorpay). We receive the transaction status and reference — we do not store your full card, UPI, or bank credentials.
- Consultation metadata: appointment status, timestamps, and the prescription your Doctor chooses to send you.
- Technical data: basic, non-identifying information (such as device/browser type) needed to serve and secure the website.
3. How we use your information
We use your information solely to operate the service, namely to:
- connect you to your chosen Doctor and facilitate the WhatsApp consultation;
- process your payment and confirm your appointment;
- schedule the consultation and deliver your prescription and confirmations;
- provide customer support and respond to your requests;
- keep the Platform secure and meet our legal and regulatory obligations.
4. What we never do with your data
- We do not use your Patient Health Information to train any AI model.
- Our systems do not provide clinical advice. Any AI-assisted feature is strictly advisory and clearly labelled — all clinical decisions are made by your registered medical practitioner.
- We do not record or transcribe your consultation without your explicit, separate consent.
- We do not sell your personal data to any third party.
5. When we share information
We share the minimum data necessary with:
- Your chosen Doctor — so they can consult with you and issue a prescription;
- Razorpay — our payment processor, to collect your consultation fee;
- WhatsApp / Meta — the messaging channel over which you choose to consult;
- Google (Calendar / Meet / Workspace) — for scheduling and, where applicable, the consultation link and confirmation email;
- Infrastructure providers (hosting and database) — under confidentiality obligations, to run the Platform.
6. Data retention
We retain your information only for as long as needed to provide the service and to comply with legal, tax, and medical record-keeping requirements, after which it is deleted or anonymised. Prescription and consultation records are retained by your Doctor as required by applicable medical regulations.
7. How we protect your data
We use encryption in transit, access controls, and role-scoped database access. We never expose Patient Health Information in application logs without redaction. No method of transmission over the internet is fully secure, but we work to protect your information using reasonable technical and organisational measures.
8. Your rights (DPDPA 2023)
As a Data Principal, you have the right to:
- access a summary of the personal data we process about you;
- request correction, completion, or erasure of your personal data;
- withdraw consent you previously gave (this does not affect prior processing);
- nominate another person to exercise your rights in the event of death or incapacity;
- raise a grievance and, if unresolved, approach the Data Protection Board of India.
To exercise any of these rights, email support@firstcarenow.com. We will respond within the timelines prescribed by law.
9. Children
Consultations for a minor must be booked and supervised by a parent or legal guardian, who consents to this policy on the child’s behalf.
10. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date above reflects the latest version. Material changes will be highlighted on this page.
11. Contact / Grievance
Grievance contact: support@firstcarenow.com
Data Fiduciary: Xphora AI Technology Pvt. Ltd.
For anything else, message our helpline from the home page.