Privacy Policy
How PRA collects, uses, and protects your personal information.
Last updated: 18 June 2026
Who We Are
ParroConnect is a clinic management platform operated by ParroConnect, registered in India. We provide WhatsApp-based appointment booking, queue management, and patient communication services to outpatient clinics across India.
In the context of this policy, "Clinic" means the healthcare provider who subscribes to PRA, and "Patient" means any individual whose data is processed through our platform.
Information We Collect
We collect the following categories of personal data:
From Patients (via WhatsApp):
- Name, age, and date of birth
- Mobile number (WhatsApp ID)
- Appointment details — date, time, doctor, reason for visit
- Basic health information shared voluntarily during consultation queries
- Follow-up responses and feedback
From Clinic Staff / Doctors:
- Name, designation, and mobile number
- Clinic name and address
- Prescription and clinical notes entered into the dashboard
- Login credentials (email + hashed password)
How We Use Your Information
We use collected data solely for the following purposes:
- Booking and confirming appointments via WhatsApp
- Managing live queue and notifying patients of their turn
- Sending post-visit follow-up reminders and health tips
- Enabling doctors to respond to patient queries through the dashboard
- Generating anonymised analytics for the clinic (not shared externally)
- Improving PRA's features and user experience
Data Sharing
We share data only in limited circumstances:
- With the clinic whose patient you are — doctors and reception staff can access your records within that clinic's account
- With trusted infrastructure providers (cloud hosting, SMS/WhatsApp API) under strict data processing agreements
- With law enforcement or regulators when legally required
Data Retention
We retain patient data for as long as the patient's clinic account remains active, or for a minimum of 3 years as required under applicable Indian health regulations.
When a clinic terminates their PRA subscription, patient data is anonymised within 90 days and permanently deleted within 12 months unless legally required to retain it.
Your Rights
Under India's DPDP Act 2023, you have the right to:
- Access — request a copy of personal data we hold about you
- Correction — request correction of inaccurate data
- Erasure — request deletion of your data where consent has been withdrawn
- Grievance — raise a complaint with our Data Protection Officer
To exercise these rights, contact us at: support@parroconnect.com
Security
We implement industry-standard security measures including AES-256 encryption at rest, TLS 1.3 in transit, role-based access controls, and regular security audits. In the event of a data breach, we will notify affected users and the Data Protection Board of India within 72 hours.
Contact
Data Protection Officer: DPO, ParroConnect
Email: support@parroconnect.com
Address: Chennai, Tamil Nadu, India