Privacy Policy

Curacom ("we", "us") provides appointment-booking and patient-communication tools for hospitals and clinics in India. This policy explains what information we handle on our website (curacom.in), our staff dashboard (app.curacom.in), and the Curacom platform, and how we protect it.

When you browse our website, we collect limited technical information needed to keep the site working and diagnose problems — for example your IP address, browser type, and the pages you visit.

When a hospital or clinic creates a Curacom account, we collect the details the organisation and its staff provide: names, work email addresses, phone numbers, and organisation name.

When a hospital uses Curacom to communicate with patients, we process patient information on the hospital's behalf — names, phone numbers, appointment details, and the content of WhatsApp conversations. We process this data only to run the service the hospital has asked us to provide, and we never use it for our own purposes.

We use information to provide, operate, secure, and improve Curacom: confirming and reminding patients about appointments, answering their questions, and giving hospital teams the dashboards they rely on. We may also use it to keep you informed about the service you use.

Hospitals are responsible for getting patient consent before messaging them and for keeping the data they enter into Curacom accurate. We do not sell personal information, and we do not use patient data for advertising.

Data is hosted on infrastructure operated by Amazon Web Services in the AWS Mumbai region (ap-south-1), India. Backups taken to keep the service safe are stored in the same region.

Data is encrypted in transit (TLS) and at rest, and access to the Curacom dashboard is password-protected and role-based so staff only see what their hospital allows.

We share data only as necessary to run the service:

• Amazon Web Services — hosting and storage infrastructure in India.
• Meta / WhatsApp — to deliver messages you or your hospital send through a WhatsApp Business Account. Meta handles those messages under its own terms and privacy policy.
• Any party you authorise, or where we are required to by law.

We keep account and platform data for as long as the account is active, and for a short period afterwards to maintain backups and comply with legal or operational requirements. Backups are retained for up to 7 days.

You can request deletion of your account or data at any time. When the data is for patients handled on a hospital's behalf, we follow the hospital's instruction.

You may ask us for access to, correction of, or deletion of the personal information we hold about you, or ask us to stop processing it. We will respond within a reasonable time. Patients whose data a hospital has collected can also ask us, and we will coordinate with the hospital.

Curacom does not use advertising cookies or cross-site trackers. We use only the technical storage needed for the site to function and for basic, aggregated usage measurement.

We may update this policy as our service evolves. The current version is always available at this page, and the effective date below tells you when it was last updated.

Questions about this policy, or requests about your data, can be sent to dev@curacom.in.