Privacy Policy — Private Beta

The website www.medagree.net and the MEDAGREE mobile application (each a “Platform”) enable verified doctors to network and discuss cases, hospitals and recruiters to hire, and business sellers to list and offer products to business buyers, alongside healthcare management and recruitment services. The contracting entity is Medagree Healthtech Private Limited (“Medagree”, “us”, “our”). Medagree recognises the importance of privacy and of maintaining the confidentiality of personal information. This Privacy Policy applies to all products and services provided by Medagree — including use via mobile devices — and sets out how Medagree may collect, use and disclose information in relation to Users of the Platform. It is the notice required by section 5 of the Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and the rules made under it: for your personal data, Medagree is the Data Fiduciary. Capitalised terms not defined here have the meanings given in the Terms & Conditions.

Registration information: name, address, phone number, email address, gender, date and/or year of birth, professional identity details (speciality, NMC registration number, qualifications, workplace, city) and user preferences, collected when you register. Doctors give a mobile number at registration; we use it to tell you about upcoming events and important updates, only our team can see it, and it is never shown to other members. Account information: in connection with transactions or payment services you may avail, details such as bank account numbers and billing information, collected to facilitate those services where enabled. Activities information: records of your activities on the Platform — posts, clinical cases, comments, reactions, job applications and ATS stage history, enquiries, messages (content and metadata such as participants and timestamps), dispute records and communications. Who can see a message: message content is visible to the participants in the conversation. If a message is reported, our moderation team can see that message to review the report. Our engineers can technically access stored messages and do so only to operate, secure or investigate the Service. Browsing information: IP addresses, browser software, operating system, device attributes, pages viewed and session statistics. Certain categories marked mandatory at collection are required — without them Medagree may not be able to complete registration or provide the Services. If you sign in via a social media account, you consent to our collection and use of the information made available through that interface. To the extent permitted by law, Medagree may record and monitor communications with us to ensure compliance with legal obligations and internal policies.

By providing User data you authorise Medagree to collect, retain and use it to: verify your identity and professional credentials; process and manage your registration; provide customer service and respond to queries, feedback, claims or disputes; enable communication between Users and process activity on the Platform; surface relevant connections, jobs, candidates and opportunities (including job alerts and recommendations); perform research and statistical analysis to improve the Platform’s content, offerings and services; send service notices and, only if you opt in, marketing communications (you can withdraw at any time from Settings or the unsubscribe link); publish information you voluntarily submit for publication; maintain audit logs for compliance and trust operations; establish, exercise or defend legal rights; and make disclosures required by law, regulation or investigation.

Medagree may disclose User data to third-party service providers (such as data hosting, authentication, verification, communications and analytics providers) who are under a duty of confidentiality and permitted to use it only for the purposes described above; to Medagree’s affiliated companies and their designated service providers; and, when necessary, to professional advisers, law enforcement agencies, insurers, government, regulatory and other organisations. If your resume or profile matches a vacancy, your details may be shared with potential recruiters — by registering and consenting to this Policy you agree that Medagree may contact you or forward your resume to potential recruiters (you can restrict this in your privacy settings). Information you voluntarily publish on the Platform may be publicly accessible; exercise caution when including personal information in public content. In the event of a merger, acquisition, financing or sale of assets, personal information may be disclosed to those involved in the negotiation or transfer. User data is not sold to third parties.

Medagree uses cookies — small amounts of data stored on your device — to identify you and enable us to access your registration information so you do not have to re-enter it, gather usage statistics, research visiting patterns, and track progress and participation on the Platform. You can configure your browser to control or reject cookies; if you disable them you may need to re-enter information more often and certain features may be unavailable.

Medagree retains personal information in accordance with applicable law, for no longer than required for the purpose for which it was collected or as required under applicable law. Medagree may retain data where necessary to prevent fraud or abuse, to exercise legal rights or defend claims, or as required by law, and may retain anonymised data for analytical and research purposes. Audit logs may be retained for up to 12 months beyond account closure for compliance purposes. Verification documents (your council registration certificate and anything else you submitted for verification) are kept while your account is open and for 3 years after it closes, only as evidence of our verification decision, and are then deleted. Documents from a rejected application are deleted 1 year after the decision. Logs that the law requires us to keep, for example under CERT-In’s directions, are kept for the period it sets. During the Private Beta specifically: beta account and content data is not guaranteed to carry over unchanged to general availability. It may be migrated, reset or deleted as the Platform moves toward public launch; where practicable, we will notify beta participants in advance of any reset that affects their data. This Private Beta note supersedes nothing above — the standard retention and deletion terms in this section still apply while the beta is running.

Medagree employs commercially reasonable security methods to prevent unauthorised access, maintain data accuracy and ensure correct use of information: data is transmitted over HTTPS with TLS encryption, passwords are hashed and never stored in plaintext, and session tokens are scoped and rotated on logout. Patient information: MEDAGREE is not designed to hold patient records. Clinical case posts must be de-identified before posting; we screen text for common identifiers, hold posts that look like they contain one for review, and act on reports — but we cannot guarantee that every post is free of patient information. No transmission over the internet can be guaranteed perfectly secure. If a personal data breach affects you, we will inform you and the Data Protection Board of India as required by the Digital Personal Data Protection Act, 2023 and the rules made under it, and report the incident to CERT-In where the law requires. Report security concerns to admin@medagree.net.

The Platform and its contents are not targeted at minors (persons under 18), and Medagree does not knowingly collect their information. If a minor has provided personal information without parental or guardian consent, the parent or guardian should contact the Grievance Officer below.

Medagree operates channels and accounts on some social media sites to inform, assist and engage with users, and monitors comments made on those channels about Medagree to improve its products and services. Do not communicate sensitive personal data (health data, financial data, government identifiers, or data revealing racial or ethnic origin, political opinions, religious beliefs, sexual orientation or criminal history) to Medagree through social media. Medagree is responsible only for its own use of personal information received through such sites.

We will tell you about a material change to this Privacy Policy by email or in the app at least 7 days before it takes effect, and we will ask for your consent again where the change needs it — for example a new purpose or a new kind of recipient. Minor changes (such as clearer wording or an updated contact) take effect when posted. The date at the top of this page always shows the version in force.