Privacy Policy (Meta Tech Provider)

Effective Date: 10 February 2026

1. Introduction

Welcome to Nibedita Pharmacy ("we," "us," or "our"). As a Tech Provider operating on the Meta Platform (specifically using the WhatsApp Business API), we are committed to protecting your privacy and ensuring the security of your data.

This Privacy Policy explains how we collect, use, process, and share "Platform Data" (data obtained from Meta/WhatsApp) strictly for the purpose of helping you (the "Client" or "User") access our healthcare services. We process this data solely to facilitate your interactions with our pharmacy services.

2. Information We Collect (Platform Data)

We collect and process the following types of Platform Data necessary to provide our services:

• WhatsApp Phone Number: Used to identify your account and send service updates.
• Profile Name: Used to personalize your experience.
• Message Content: The text, images (prescriptions), or selections (doctor names, test types) you send to us.
• Technical Metadata: Information necessary to deliver messages (e.g., message IDs, timestamps).

We do NOT collect sensitive personal data such as government IDs, financial account numbers, or passwords via the WhatsApp channel unless strictly necessary for a specific regulated service and with your explicit additional consent.

3. How We Use Your Information (Purpose Limitation)

We use Platform Data strictly for the Client's Purpose, which is to help you use the WhatsApp Business API to access our pharmacy services. Specifically:

• To process your medicine orders and inquiries.
• To schedule doctor consultations and diagnostic tests.
• To send you appointment reminders and test reports (upon request).

4. Data Sharing and Service Providers

We do not share your Platform Data with third parties, except as necessary to provide the service or as required by law.

A. Service Providers (Sub-Processors)

We use trusted third-party service providers to support our infrastructure. These providers process data only on our behalf and under strict confidentiality agreements:

• Supabase: We use Supabase as our database provider to securely store your data.
• Self-Hosted Infrastructure: We run our application logic on our own secure servers (managed via Coolify and Redis) to ensure data sovereignty.

B. Legal Requirements

We may disclose information if required by law, such as in response to a court order from the Courts of Kolkata or other competent Indian authorities.

5. Data Retention and Deletion

We retain your personal data and message logs only for as long as necessary to fulfill the service purpose.

Retention Period: We strictly retain your message logs and transaction data for a period of 15 days. This allows us to handle follow-up queries and ensure service quality. After 15 days, this data is permanently deleted from our active systems.

6. User Rights

Under applicable laws (including privacy standards required by Meta), you have the right to:

• Access: Request a copy of the data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request specific deletion of your data before the standard 15-day purge (Right to be Forgotten).

To exercise these rights, please contact us at support@nibeditapharmacy.in.

7. Meta Platform Terms

Our use of Platform Data is also governed by Meta's Platform Terms and Developer Policies. In the event of any conflict between this policy and Meta's terms regarding Platform Data, Meta's terms will take precedence.

8. Contact Us & Jurisdiction

If you have any questions about this Privacy Policy, please contact our Grievance Officer/Support Team: