Privacy Policy

How PRA collects, uses, and protects your personal information.

Last updated: 18 June 2026

1

Who We Are

ParroConnect is a clinic management platform operated by ParroConnect, registered in India. We provide WhatsApp-based appointment booking, queue management, and patient communication services to outpatient clinics across India.

In the context of this policy, "Clinic" means the healthcare provider who subscribes to PRA, and "Patient" means any individual whose data is processed through our platform.

2

Information We Collect

We collect the following categories of personal data:

From Patients (via WhatsApp):

  • Name, age, and date of birth
  • Mobile number (WhatsApp ID)
  • Appointment details — date, time, doctor, reason for visit
  • Basic health information shared voluntarily during consultation queries
  • Follow-up responses and feedback

From Clinic Staff / Doctors:

  • Name, designation, and mobile number
  • Clinic name and address
  • Prescription and clinical notes entered into the dashboard
  • Login credentials (email + hashed password)
3

How We Use Your Information

We use collected data solely for the following purposes:

  • Booking and confirming appointments via WhatsApp
  • Managing live queue and notifying patients of their turn
  • Sending post-visit follow-up reminders and health tips
  • Enabling doctors to respond to patient queries through the dashboard
  • Generating anonymised analytics for the clinic (not shared externally)
  • Improving PRA's features and user experience
✅ We do not sell, rent, or share your personal data with third-party advertisers.
4

Data Sharing

We share data only in limited circumstances:

  • With the clinic whose patient you are — doctors and reception staff can access your records within that clinic's account
  • With trusted infrastructure providers (cloud hosting, SMS/WhatsApp API) under strict data processing agreements
  • With law enforcement or regulators when legally required
5

Data Retention

We retain patient data for as long as the patient's clinic account remains active, or for a minimum of 3 years as required under applicable Indian health regulations.

When a clinic terminates their PRA subscription, patient data is anonymised within 90 days and permanently deleted within 12 months unless legally required to retain it.

6

Your Rights

Under India's DPDP Act 2023, you have the right to:

  • Access — request a copy of personal data we hold about you
  • Correction — request correction of inaccurate data
  • Erasure — request deletion of your data where consent has been withdrawn
  • Grievance — raise a complaint with our Data Protection Officer

To exercise these rights, contact us at: support@parroconnect.com

7

Security

We implement industry-standard security measures including AES-256 encryption at rest, TLS 1.3 in transit, role-based access controls, and regular security audits. In the event of a data breach, we will notify affected users and the Data Protection Board of India within 72 hours.

8

Contact

Data Protection Officer: DPO, ParroConnect

Email: support@parroconnect.com

Address: Chennai, Tamil Nadu, India