Privacy Policy
Last updated 19 August 2026.
Pragati Solutions builds and operates MediBook, a WhatsApp-based appointment system for dental clinics in India. This page explains what we do with personal data, both on this website and inside MediBook.
Two different roles
Which one applies to you matters.
This website, and clinic accounts. When you fill in the demo form, or when your clinic holds a MediBook account, we decide how that information is used. Under India’s Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for it.
Patient records inside MediBook. Patient names, phone numbers and treatment histories belong to the clinic that entered them. The clinic is the Data Fiduciary; we are a Data Processor acting on its instructions. If you are a patient, speak to your clinic first — they control that record and can correct or delete it.
What we collect from this website
- What you type into the demo form: your name, WhatsApp number, clinic email address, and what you tell us about your clinic.
- Standard technical information your browser sends — IP address, browser type, pages viewed — used to keep the site working and secure.
We do not run advertising trackers, and we do not sell data to anyone.
What MediBook stores for a clinic
Entered by the clinic and held on its behalf:
- Patient name, mobile number and, if the patient gives it, date of birth.
- Appointments, cancellations, attendance, and the clinical or desk notes the clinic records.
- Treatment courses, and payments the clinic records against them.
- The WhatsApp conversation between the patient and the clinic.
Messages are sent and received through Meta’s official WhatsApp Business Cloud API. Meta handles delivery and processes message content under its own terms and privacy policy. All clinics on MediBook share one WhatsApp business number; a clinic’s own six-character entry code is what routes a patient’s messages to the right practice.
Why we hold it
- To provide MediBook to the clinic — taking bookings, sending reminders, and keeping the clinic’s records.
- To answer a demo enquiry and set a clinic up.
- To keep the service secure and to meet our legal obligations.
How long we keep it
Demo enquiries: for as long as we are in touch about it, and a reasonable period afterwards. Clinic and patient data: for as long as the clinic’s subscription runs. When it ends the clinic may export everything, and we delete the clinic’s data on written request.
Who else sees it
- The infrastructure providers who host the application and its database.
- Meta, for WhatsApp message delivery.
- Anyone we are legally required to disclose to.
That is the whole list. We do not sell personal data and we do not share it for advertising.
How it is protected
- Traffic is encrypted in transit.
- Conversation data is encrypted at rest.
- Each clinic’s records sit in a separate database schema, so one clinic cannot read another’s.
- Dashboard access is by named staff account with roles, and consequential actions are written to an audit log.
- A clinic can export its own patients, appointments and treatments at any time.
No system is perfectly secure, and we do not claim otherwise.
Your rights
Under the DPDP Act you may ask for access to your data, correction of it, erasure of it, and information about who we have shared it with. You may also nominate someone to exercise these rights on your behalf.
Patients: contact your clinic first — the record is theirs. If the clinic cannot resolve it, write to us and we will help them.
Cookies
This site uses only what it needs to work and to remember your cookie choice. There are no advertising cookies.
Children
MediBook may hold records for patients under 18, entered by a clinic. Obtaining verifiable parental consent, both for treatment and for holding that record, is the clinic’s responsibility.
Grievances
Write to the Grievance Officer, Pragati Solutions, at contactus@pragatisolutions.com, or A202, Mantri Lithos, Manyata Tech Park, Bengaluru 560045. We will acknowledge within 72 hours and respond within the period the DPDP Act requires.
Changes
If this policy changes we will update this page and the date at the top.