In plain words
- We collect only what we need to verify you, run your account and improve MedSocio.
- We never sell your personal data, and we do not show third-party advertising.
- Never enter information that could identify a patient. AI tool inputs are not stored in identifiable form.
- You can access, correct or erase your data, and withdraw your consent, at any time.
- We follow India's Digital Personal Data Protection Act, 2023.
This summary is for convenience. The full text below is what applies.
1Who we are
MedSocio HealthTech Private Limited ("MedSocio", "we", "us") operates the MedSocio Platform. For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), we are the Data Fiduciary for the personal data described in this policy, and you are the Data Principal.
This policy applies to the MedSocio website, mobile applications and related services.
2Information we collect
Information you give us
- Account details: name, email address, mobile number and password.
- Professional details: medical registration number and council, year of registration, qualifications, specialty, institution and workplace. For students: college, course, year and enrolment details.
- Verification information: any documents or details we may request to confirm your identity.
- Profile and content: profile photo, biography, posts, comments, case discussions, images, messages and reactions.
- Learning data: answers, scores and progress in test preparation.
- Payments: transaction details from our payment provider, such as the amount, date and status. We do not receive or store your full card or bank details.
- Communications: messages you send to our support or grievance teams.
Information collected automatically
- Device and browser type, IP address, approximate location derived from your IP address, log data, and how you use the Platform.
- Information from cookies and similar technologies, as described in our Cookie Policy.
Information from others
- Official medical registers, which we consult to check your registration details.
- Your institution, if you join through an institutional plan.
- Other members, for example when they mention or tag you.
3Patient information
MedSocio is designed so that patient information is never identifiable. Our Terms and Community Guidelines require members to remove every detail that could identify a patient before sharing anything.
- If we become aware of content that could identify a patient, we remove it.
- Clinical details you enter into AI Diagnostic Assist and clinical tools are processed to generate a response and are not stored in identifiable form.
4How we use your information
| Purpose | What this involves |
|---|---|
| Verifying your identity | Checking your registration or enrolment details, an AI-assisted profile review, and a final personal review by our team. |
| Running your account | Creating your profile, connecting you with specialty communities, members and alumni, and delivering messages and notifications. |
| Personalising your experience | Showing relevant posts, cases, specialties and learning content. |
| Test preparation | Scoring, analytics, weak-area detection and rank estimates. |
| Payments | Processing subscriptions, invoices and refunds. |
| Safety and integrity | Moderating content, preventing fraud and impersonation, and enforcing our Terms. |
| Communication | Service messages, and newsletters or updates if you have agreed to receive them. |
| Improving MedSocio | Understanding usage through aggregated or de-identified information to fix problems and build better features. |
| Legal obligations | Complying with law, responding to lawful requests, and protecting our rights. |
5Our legal basis
We process your personal data on the basis of the consent you give when you create an account and use specific features, in line with Section 6 of the DPDP Act. You may withdraw your consent at any time; this does not affect processing that took place before you withdrew it, although some features may no longer be available to you.
In limited cases, we may process personal data for legitimate uses permitted under Section 7 of the DPDP Act, such as complying with a legal obligation or a lawful order.
6How we share information
We never sell your personal data, and we do not share it with advertisers. We share information only in these situations:
- With other members: your profile and content are visible to other verified members according to your settings. MedSocio is a closed community and is not visible to the public.
- With service providers: trusted companies that provide hosting, storage, communications, payments, analytics and AI processing on our behalf. They may use your information only to provide services to us, under contract.
- With your institution: if you join through an institutional plan, your institution may see your learning progress and engagement.
- For legal reasons: where required by law, court order or a lawful request from a government authority, or to protect the safety of any person.
- In a business transfer: if MedSocio is involved in a merger, acquisition or sale of assets, subject to this policy.
7AI and automated processing
- Verification: AI helps us review profile details for consistency. It never makes the final decision; a member of our team always does.
- Clinical tools: your inputs are processed to generate suggestions and are not stored in identifiable form.
- Your feed: we use your specialty, interests and activity to show relevant content. You can adjust your preferences in settings.
8Where your data is processed
Your data is primarily stored and processed in India. Some of our service providers may process data outside India. Where this happens, we transfer data only to countries not restricted by the Government of India, and only with appropriate contractual and security safeguards.
9How long we keep your data
- We keep your personal data for as long as your account is active.
- When you delete your account, we delete or anonymise your personal data within 30 days, except where we must retain it longer by law, for example financial records required under tax laws, or to resolve a dispute.
- Content you shared in public community spaces may remain in anonymised form where removing it would break other members' discussions.
10How we protect your data
We use reasonable security safeguards, including encryption of data in transit, access controls, regular security reviews and staff confidentiality obligations. No system is completely secure, but we work continuously to protect your information. If a personal data breach occurs, we will notify the Data Protection Board of India and affected members as required by law.
11Your rights
Under the DPDP Act, you have the right to:
- Access a summary of the personal data we hold about you and how we process it;
- Correct, complete or update inaccurate or incomplete data;
- Erase your personal data, subject to legal retention requirements;
- Withdraw consent at any time;
- Grievance redressal through our Grievance Officer; and
- Nominate another person to exercise your rights in the event of your death or incapacity.
You can exercise most of these rights from your account settings, or by writing to support@medsocio.com with the subject line "Privacy request". If you are not satisfied with our response, you may approach the Data Protection Board of India.
12Your choices
- Control who can see your profile and posts, and who can message you.
- Choose which notifications and emails you receive, and unsubscribe from marketing at any time.
- Manage non-essential cookies through our cookie settings.
13Children
MedSocio is intended for adults. Medical students under 18 may join only with the verifiable consent of a parent or lawful guardian. We do not track, behaviourally monitor or target advertising at anyone under 18.
14Changes to this policy
We may update this policy from time to time. We will notify you of material changes on the Platform or by email before they take effect.
15Contact and Grievance Officer
For privacy questions or requests, write to support@medsocio.com with the subject line "Privacy request".
Grievance Officer
MedSocio HealthTech Private Limited
Unit 101, Oxford Towers, 139, HAL Old Airport Road, Kodihalli, Bengaluru, Karnataka 560008, India
Email: support@medsocio.com