Privacy Policy

Last updated: 3 October 2026

OPDlive (opdlive.in) is run by Graspion Technologies Private Limited ("OPDlive", "we", "us"). OPDlive shows patients the live OPD queue of their doctor and lets them book appointments, and gives doctors, hospitals and their receptionists the tools to run that queue.

This policy explains what personal data we collect, why, who we share it with and your rights under Indian law, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 ("DPDP Act").

In short: we collect only what is needed to run the queue and your account. We do not sell your data. Your clinic sees your booking details; other patients do not. You can delete your patient account from Settings at any time.

1. What we collect
2. Why we use it
3. Your consent
4. Who can see what
5. Service providers
6. Where data is stored
7. How long we keep it
8. Security
9. Your rights
10. Children
11. Cookies & notifications
12. Grievance Officer
13. Changes

1. What we collect

Who	Data
Patients (and family members added by them)	Name, age, gender, city, address, mobile number, password (stored only in encrypted form by our login provider), Google account name and email if you use "Continue with Google", the doctors you book, appointment and token details, visit history with that clinic, chosen language.
Doctors	Name, specialization, Medical Registration No., mobile number, email, clinic or hospital name, clinic address and map location (only if you press "Use my current location"), OPD timings, leave days, plan details, payments received and tax invoices (including your GSTIN, if you give it).
Hospitals & receptionists	Name, email or mobile number used to log in, hospital name and address, the doctors and receptionists linked to the hospital.
Everyone	Device and browser type, notification token (only if you allow notifications), basic logs (time of login, errors) needed to keep the service secure and working.

OPDlive is a queue and appointment tool. We do not ask for or store your medical diagnosis, prescriptions or test reports.

2. Why we use it

To create and run your account and let you log in.
To book appointments, show the live queue, your token and expected time, and to send turn alerts.
To let the clinic you booked with manage its queue (approve, call, mark visited).
For doctors: to verify the Medical Registration No., show the clinic to patients, manage the plan, and issue GST tax invoices.
To answer support requests and send important service messages.
To prevent misuse (for example, a daily booking limit), keep the service secure and meet legal and tax duties.

We process your personal data on the basis of the consent you give when you tick "I agree" while registering, and, where the law allows, for legitimate uses such as legal compliance and fraud prevention. You may withdraw consent at any time by deleting your account or writing to us; this does not affect processing done before that, and we may not be able to keep providing the service without the data it needs.

4. Who can see what

The clinic you book with (the doctor, the hospital and their receptionists) sees your name, age, gender, mobile number, city and your bookings with that clinic. Clinics must use this only to treat and serve you.
Other patients see only token numbers and queue status, never your name or mobile number.
Patients see a doctor's name, specialization, clinic name, address, map location and OPD timings. A doctor's mobile number, email, registration documents and payments are not shown to patients.
OPDlive staff see data only when needed to run, support or verify the service.

We share data only with providers who help us run OPDlive, under contracts that require them to protect it:

Google Firebase / Google Cloud: hosting, login, database, server functions and push notifications.
Google Workspace (Gmail): to email tax invoices and answer support emails.
SMS / WhatsApp OTP provider: only once mobile OTP is switched on, to send the one-time password to your number.
Payment partner (such as Razorpay): only once online payment is switched on. We never see or store your full card, UPI PIN or net-banking password.

We may also disclose data to courts, the government or law-enforcement agencies when the law requires it. We do not sell or rent your personal data.

6. Where data is stored

Our database runs in Google Cloud's Mumbai (India) region. Some providers (for example, email and notification delivery) may process data briefly outside India, as permitted by Indian law.

7. How long we keep it

Patient accounts: until you delete the account. Deleting removes your profile and bookings from OPDlive; a clinic may keep its own records of your past visits as required by law.
Doctor and clinic accounts: while the account is active, and afterwards as long as needed for disputes and legal purposes.
Payment records and tax invoices: for the period required by GST and income-tax laws.
Logs: for a short period, normally a few months.

8. Security

We use HTTPS encryption, secure login, database access rules (each person can open only the data meant for them), and limited staff access. No online system is 100% secure; if a personal data breach affects you, we will inform you and the authorities as required by law.

9. Your rights

Under the DPDP Act you can ask us to:

give you a summary of the personal data we hold about you and how we use it;
correct, complete or update it (most details can be edited in your profile);
erase it (patients can use Settings → Delete account);
withdraw your consent;
nominate another person to use these rights if you are unable to;
resolve a complaint (see section 12).

Write to support@opdlive.in. We may need to confirm your identity first. If you are not satisfied with our reply, you may approach the Data Protection Board of India.

10. Children

An OPDlive account must be opened by an adult (18+). A parent or guardian may add a child as a family member and book on the child's behalf, and by doing so gives consent for the child's data to be used for that booking.

11. Cookies, storage & notifications

We use your browser's storage only to keep you logged in and remember settings such as language. We do not use advertising cookies. Notifications are sent only if you press "Allow", and you can switch them off any time in Settings or your browser.

12. Grievance Officer

Grievance Officer, OPDlive
Graspion Technologies Private Limited
Bldg. No. 2, Flat No. 301, Neelkamal Comp., Amt. Road, Nagpur, Maharashtra 440010
Email: support@opdlive.in · Phone: +91 8669999020

We aim to acknowledge complaints within 48 hours and resolve them within 15 days.

13. Changes to this policy

We may update this policy. The new version will be posted on this page with a new date; for important changes we will also inform you on OPDlive or by email.