Privacy Policy

At Rashuv Technologies (including operating divisions RashuvMed, RashuvBiz, and associated digital operating software platforms such as RMedQ), we take privacy and data sovereignty with paramount seriousness. This Privacy Policy outlines how we collect, process, store, and protect information when you visit our corporate portal (rashuv.com), access our clinical queue solutions (rmedq.rashuv.com), or engage with our enterprise solutions.

1. Scope & Operating Divisions

This Privacy Policy applies universally to all software, web applications, APIs, and digital interfaces published by Rashuv Technologies:

• Corporate Portal (rashuv.com): Business inquiries, enterprise sales consultations, and technical solution briefs.
• RashuvMed (including RMedQ — rmedq.rashuv.com): Smart OPD queue management, clinic digital token ticketing, doctor cabin consoles, and waiting hall TV telemetry for healthcare facilities across India.
• RashuvBiz: Enterprise digital solutions, custom workflow automation, systems integration, and administrative operating infrastructure.
• Tech & AI Labs: Secure cloud pipelines, encrypted storage vaults, and real-time operational event engines.

2. Information We Collect & How It Is Used

We adhere to strict data minimization principles. We only collect information strictly required to deliver digital operational services:

• Healthcare & Clinic Queue Data (RashuvMed / RMedQ): To assign queue tokens and notify patients of live Estimated Time of Consultation (ETC), we process basic patient identifiers (e.g., patient name, age, mobile phone number for SMS/WhatsApp queue tracking, and assigned token sequence numbers). Medical clinical details remain exclusively between the consulting doctor and the patient.
• Enterprise & B2B Client Data (RashuvBiz): For enterprise organizations deploying custom workflow integrations, we process organizational contact details, administrative credentials, and operational parameters strictly necessary to fulfill contractual enterprise service agreements.
• Enterprise Inquiries & Customer Support: Contact details (name, organizational email, clinic/business name, phone number, and message context) submitted via our digital inquiry desks.
• Technical Diagnostics & Security Logs: IP addresses, browser user-agents, and timestamped security audit trails captured in compliance with Indian CERT-In guidelines and CIS Controls to prevent DDoS and unauthorized credential stuffing.

3. Legal Framework & Data Governance in India

Rashuv Technologies governs all personal and operational data in strict accordance with applicable Indian statutory laws, specifically the Information Technology Act, 2000 (including the Reasonable Security Practices and Procedures and Sensitive Personal Data or Information Rules, 2011) and the Digital Personal Data Protection Act, 2023 (DPDP Act):

• Statutory Role as Data Fiduciary: Under the DPDP Act 2023, Rashuv Technologies and subscribing clinical establishments act as Data Fiduciaries / Data Processors with defined responsibilities to handle digital personal data lawfully, transparently, and securely.
• Consent-Driven Processing: Queue generation and communication alerts are activated strictly upon patient or staff consent at the point of interaction.
• Voluntary Health Data Alignment: While DISHA (Digital Information Security in Healthcare Act) was introduced as a draft bill and has not been enacted into law, RashuvMed (RMedQ) voluntarily adopts core healthcare privacy-by-design guidelines (such as token masking and multi-tenant database isolation) derived from national digital health frameworks including the Ayushman Bharat Digital Mission (ABDM).
• Rights of Data Principals: In accordance with statutory provisions, users and patients possess rights to seek confirmation of processing, request correction or completion of inaccurate records, and request data erasure subject to medical and statutory retention requirements.

4. Storage, Encryption & Data Residency

All production databases and application infrastructure are hosted on enterprise-grade Google Cloud datacenters located within Indian territory (Asia South 1 — Mumbai / Asia South 2 — Delhi):

• Data at Rest: Encrypted using industry-standard AES-256 cryptographic algorithms.
• Data in Transit: Encrypted via TLS 1.3 with mandatory HTTP Strict Transport Security (HSTS).
• Credential Protection: Zero plaintext storage of passwords or master passcodes. All administrative credentials utilize salted cryptographic hashing.

5. Cookies & Tracking Technologies

Our web applications use strictly essential cookies and local storage items (e.g., visual theme preference, authenticated session tokens, and local offline cache). We do NOT deploy third-party advertising cookies, Facebook Pixels, or intrusive surveillance trackers.

6. Data Retention

Operational queue tokens and daily wait-time telemetry are purged or archived according to clinic operational configurations. Administrative audit logs are retained for security compliance in accordance with applicable statutory requirements and subsequently expunged.

7. Grievance Redressal & Privacy Officer

In accordance with the DPDP Act 2023 and the Information Technology Act 2000, you may address any privacy concerns, data subject requests, or grievances to our designated Grievance Office: