Data Security & Compliance

Privacy Policy

Effective Date: August 2026 | Compliant with Digital Personal Data Protection Act (DPDP) & ABDM Standards

1. Commitment to Patient Privacy

Softkrest Infotech ("we", "us", "our"), the operating entity of CareSeva™ (https://careseva.co.in), is committed to safeguarding the privacy and electronic health records of all users, patients, and healthcare providers who utilize our digital health ecosystem.

2. Information We Collect

To facilitate medical consultations and hospital queue bookings, we collect:

  • Patient Identity Details: Full name, phone number, gender, date of birth / age, and city.
  • Appointment Data: Doctor name, hospital / department selected, appointment slot, token number, and visit history.
  • Digital Health Records (Optional): Electronic prescriptions, diagnostic reports, and medical notes uploaded or generated during consultation.
  • Device & Log Information: IP address, device model, operating system, and session tokens for secure authentication.

3. Payment Processing & Financial Data Safety

All financial transactions and online payments for appointments are processed exclusively through our authorized payment aggregator, Cashfree Payments India Pvt. Ltd.

Crucial Note: CareSeva and Softkrest Infotech do NOT collect, view, or store your sensitive financial data (such as complete debit/credit card numbers, CVV codes, bank account passwords, or UPI PINs). All payment interactions comply strictly with RBI Payment Aggregator guidelines and PCI-DSS standards.

4. Data Sharing & Zero Commercial Selling Policy

We uphold a strict zero-tolerance policy against commercial data monetisation:

  • We NEVER sell or rent your personal health data to pharmaceutical companies, advertisers, or third-party brokers.
  • Data is shared strictly with the specific hospital, doctor, or clinic you book an appointment with, solely for providing clinical healthcare.
  • Data may be disclosed if required by law enforcement or government authorities pursuant to a valid legal order or court mandate.

5. User Consent & Data Rights

Under Indian data protection laws, you retain full ownership of your data:

  • Access & Correction: You can review and update your profile and health records at any time.
  • Account & Data Deletion: You have the right to request deletion of your account and personal records by emailing our Grievance Officer at softkrestinfotech@gmail.com.

6. Grievance Redressal Officer

In accordance with the Information Technology Act 2000 and the DPDP Act 2023:
Grievance Officer: Sarthak Srivastava
Entity: Softkrest Infotech
Email: softkrestinfotech@gmail.com
Address: Srivastava Niwas, Churamanpur, Bhullanpur, Kashi Vidyapeeth, Varanasi, UP - 221108