Privacy Policy

Opdora provides online booking and live queue software for independent doctors and clinics around the world. This policy explains what data we handle, why, and the choices you have. It applies to our website, the doctor workspace, and the public booking and tracking pages patients use.

We follow the data protection laws that apply where our clinics and patients are — including the EU and UK GDPR and India’s Digital Personal Data Protection Act, 2023. For patient data, the clinic decides why and how it is used; Opdora processes it on the clinic’s behalf and only on its instructions.

We collect only what is needed to run bookings and the queue:

• Doctors and clinic staff: name, email, phone number, clinic name and address, specialty, registration details you choose to show, schedules and settings.
• Patients: name, phone number, and the details a clinic asks for when booking (such as age or reason for visit), plus appointment times and token numbers.
• Usage data: basic technical information such as browser type, device, and pages visited, used to keep the service secure and reliable.

Opdora is not a medical records system. We don’t ask for diagnoses or prescriptions, and we ask clinics not to store clinical records in free-text booking fields.

• To create and manage appointments and the live queue for the clinic.
• To send patients booking confirmations and queue updates by SMS or WhatsApp, when the clinic turns these on.
• To let doctors sign in, manage their page, and contact patients about their visit.
• To provide support, prevent misuse, and fix problems.
• To understand, in aggregate, how the product is used so we can improve it.

Patient data belongs to the clinic the patient booked with. Only that clinic’s doctor and the staff they invite can see it. Other clinics on Opdora cannot see it, and nothing about a patient appears on a doctor’s public page.

A patient’s tracking link is private to them. It shows their own token, their position in the queue and an estimated time — never other patients’ names, phone numbers or details. Anyone with the link can see that token, so patients should share it only with people they trust.

A small number of Opdora staff may access data when needed to provide support or keep the service secure, under strict confidentiality and with access logged.

We never sell personal data, rent it, or use it for advertising. We share it only with service providers that help us run Opdora — such as cloud hosting, SMS and WhatsApp delivery, and email — under contracts that limit their use to providing that service.

We may disclose data if required by law, a court order, or to protect someone’s safety, and we’ll tell the clinic where the law allows.

We use a small number of essential cookies to keep you signed in, remember your preferences and protect against misuse. We may use privacy-friendly analytics to count page visits in aggregate. We don’t use advertising or cross-site tracking cookies. Blocking essential cookies may stop the doctor workspace from working.

Data is stored on secure cloud servers, encrypted in transit and at rest. Access inside Opdora is limited to people who need it. No system is perfectly secure, but if a breach affects your data we will inform you and the authorities as the law requires.

We keep clinic and patient data for as long as the clinic’s account is active. When a clinic closes its account, we delete or anonymise its data within 90 days, except where the law requires us to keep it longer.

You can ask us to:

• Show you the personal data we hold about you.
• Correct data that is wrong or out of date.
• Delete your data, where we are not required to keep it.
• Withdraw consent for optional messages.

Doctors and clinics can do most of this from their workspace settings, or by writing to privacy@opdora.app. Patients can ask the clinic directly, or write to us and we’ll work with the clinic to respond. We reply within 30 days.

Clinics may book appointments for children. These bookings should be made by a parent or guardian, who gives consent on the child’s behalf. Opdora accounts for doctors and staff are for adults only.

If we change this policy in a meaningful way, we’ll tell clinics by email and in the workspace before the change takes effect. The date at the top shows when it was last updated.

Questions, requests or complaints go to our Grievance Officer at privacy@opdora.app, or through our contact page. Opdora, Bengaluru, India.