Privacy Policy

1. About Us

VyaparX is a product of Deori RecruiterHub OPC Solutions OPC Pvt Ltd, offering WhatsApp AI automation for clinics and businesses in India.

Registered Address:
GM Infinite, A114, E Block, 1st Floor,
Thirupalya Road, Electronic City Phase 1,
Bangalore – 560100, Karnataka, India

Email: hello@getvyaparx.com
Website: www.getvyaparx.com

2. Information We Collect

2.1 From Patients (End Users)

When a patient interacts with a clinic's WhatsApp bot powered by VyaparX, we collect:

• Full name
• WhatsApp phone number
• Preferred clinic and doctor
• Appointment date and time

2.2 From Clinic Owners (Business Customers)

When a clinic or business onboards to VyaparX, we collect:

• Clinic / business name and address
• Working days, hours, and appointment slot duration
• Doctor names and availability
• Owner name, email, and phone number
• WhatsApp Business API credentials (Meta Access Token, Phone Number ID, WABA ID)
• Services or procedures offered, including costs and images
• Google reviews, Google Maps link
• Clinic photos and logo

3. How We Use Your Information

• To power the WhatsApp appointment booking experience for patients
• To send appointment confirmations, reminders, and follow-ups via WhatsApp
• To notify clinic owners of new bookings, cancellations, and patient queries
• To generate weekly analytics and performance summaries for clinic owners
• To improve our AI models and service quality
• To communicate important service updates to clinic owners

4. WhatsApp Messaging, Opt-In & Opt-Out

VyaparX sends WhatsApp messages to patients only on behalf of clinics that have been explicitly onboarded onto our platform. The following rules apply:

4.1 Opt-In

Patients receive WhatsApp messages only after they have actively initiated contact with a clinic's WhatsApp number or have explicitly consented to receive communications. Clinic owners are responsible for ensuring valid opt-in consent from their patients prior to using VyaparX's messaging features.

4.2 Opt-Out

Any patient can opt out of receiving WhatsApp messages at any time by replying STOP to any message, or by contacting the clinic directly. We honour all opt-out requests promptly. Opted-out numbers are suppressed and will not receive further automated messages.

4.3 Message Types

We send only transactional and service-related messages (appointment confirmations, reminders, follow-ups) and marketing messages only where explicit consent has been obtained. We do not send unsolicited bulk messages or spam.

5. Third-Party Services

To deliver our services, we work with the following trusted third-party providers. Your data may be processed by them in accordance with their own privacy policies:

• Meta Platforms, Inc. (WhatsApp Cloud API) — Direct WhatsApp Business Platform integration for message delivery and account management. We use Meta's Cloud API directly and comply with the WhatsApp Business Policy and Meta Platform Terms.
• Supabase — Secure database and storage
• Railway — Cloud hosting and infrastructure
• Anthropic (Claude) — AI language model. Patient message text is sent to Anthropic's API to generate intelligent, context-aware replies on behalf of the clinic.
• Google (Gemini) — AI language model. Patient message text may be sent to Google's Gemini API for AI-powered response generation.
• ElevenLabs — Voice call automation. Patient phone numbers may be sent to ElevenLabs to trigger AI-powered outbound voice calls on behalf of the clinic.
• Resend — Transactional email delivery. Clinic owners receive email notifications that may include patient phone numbers and a summary of their message.
• Upstash — Redis-based rate limiting and caching
• Razorpay — Payment processing

We do not sell your personal data to any third party.

6. International Data Transfers

VyaparX is based in India. However, some of our third-party service providers (including Meta, Supabase, Railway, Anthropic, Google, ElevenLabs, Resend, and Upstash) process data on servers located outside India, including in the United States and other countries. By using our services, you consent to your personal data being transferred to and processed in these countries.

Where data is transferred internationally, we ensure appropriate safeguards are in place, including relying on the privacy policies and data protection commitments of our service providers, which comply with applicable international data protection standards.

7. Data Retention

We retain patient and clinic data for as long as the clinic remains an active subscriber of VyaparX. Upon termination of a clinic's subscription, data may be retained for a reasonable period for legal and compliance purposes, after which it is deleted or anonymized.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. All data is stored on secured cloud infrastructure and access is restricted to authorised personnel only.

9. Your Rights & Data Deletion

Under applicable Indian data protection laws, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal obligations)
• Withdraw consent for data processing
• Object to processing of your personal data

To request deletion of your data or exercise any of the above rights, please email us at hello@getvyaparx.com with the subject line "Data Deletion Request". We will process your request within 30 days.

Patients who wish to stop receiving WhatsApp messages can reply STOP to any message or contact us at hello@getvyaparx.com.

10. Meta Platform Terms Compliance

VyaparX uses the Meta WhatsApp Cloud API to provide messaging services. Our use of Meta's platforms is governed by the Meta Platform Terms and the WhatsApp Business Policy. We do not use WhatsApp data to serve advertising, do not share WhatsApp message content with third parties except as required to deliver our service, and comply fully with Meta's developer policies and data use restrictions.

11. Law Enforcement & Government Requests

VyaparX may disclose personal data to public authorities or law enforcement agencies only where required by applicable law, court order, or legal process. We apply the following practices for all such requests:

• Legality review: We review every request to confirm it is legally valid and issued by a competent authority before taking any action.
• Data minimisation: We disclose only the minimum personal data strictly necessary to comply with the specific legal obligation. We do not provide broader access to our systems or data beyond what is required.

We do not sell or share personal data with government authorities for surveillance or national security purposes beyond what is required by law.

12. Cookies

VyaparX does not use cookies on www.getvyaparx.com. We do not track visitors using cookies, advertising cookies, or third-party analytics cookies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with the revised effective date. Continued use of our services after any changes constitutes your acceptance of the updated policy.

14. Grievance Officer

In accordance with the Information Technology Act, 2000 and applicable rules, the details of our Grievance Officer are as follows: