Privacy Policy
Last Updated: June 2026
UpChar Setu ("we", "our", or "us") is dedicated to protecting the privacy of medical practitioners, clinic administrators, and the patients whose records are managed via our platform. This Privacy Policy details how we handle information across our multi-tenant SaaS. For medical and regulatory boundaries of the platform, see our Medical Disclaimer.
1. Information We Collect
We collect medical practitioner credentials, clinic names, registration licenses, email addresses, mobile contacts, and subscription billing metrics inside the Web Portal.
Patient Information: Patient records (vitals, diagnoses, medication courses, history cards) are saved inside isolated database schemas. UpChar Setu personnel cannot read or query raw patient details unless explicitly authorized for system maintenance.
2. Local Storage and Android App
The Android companion app stores consultation data on your device when internet is unavailable. When you are back online, records are updated to your secure cloud account. Device-level protections apply to data at rest on the device.
3. Multi-Tenant Database Isolation
We operate a strict multi-tenant architecture. Every clinic instance is completely containerized. Data is never shared, aggregated, or leaked between different medical practitioner accounts.
4. Payment Processing
Subscriptions are handled via PCI-DSS compliant gateways (Razorpay and PhonePe). UpChar Setu never holds, processes, or logs UPI PIN codes, card details, or internet banking keys on our servers.
5. Patient Consent Responsibility
Practitioners are solely responsible for acquiring necessary consents from their patients before registering them inside the EMR tracker, scanning patient QR codes, or outputting prescription PDFs.
6. Digital Personal Data Protection (India)
Where applicable, we process personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act). Doctors act as data fiduciaries for their patient records; UpChar Setu acts as a data processor securing those records on your behalf. You may contact us to request access, correction, or deletion of your account data subject to legal and clinical record-keeping requirements.
7. Contact Support
For privacy inquiries or deletion requests, please contact our data protection officer at privacy@upcharsetu.in.