Home / Privacy Policy
Legal

Privacy Policy

What we collect, why we collect it, who can see it, how long we keep it, and how you can have it deleted.

Effective date: 25 September 2026

This notice explains how ESIC Health Bridge, operated by DoctorBrainAI.com, Jaipur, Rajasthan, India ("we", "us"), handles personal data. We have written it to be read by everyone, not only lawyers. It is intended to align with India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and the rules made under it. Under that law we act as a Data Fiduciary and you are the Data Principal.

The short version: we collect only what we need to help you, we never sell personal data, your employer's HR team never sees your individual health questions, and you can ask us to delete your data at any time.

1. What we collect

On this website

  • Contact, support and demo requests. When you fill in a form, we receive the details you type in, such as your name, email address, phone number, organisation, and your message. These forms send your details to us by email.
  • The assistant and facility finder. These tools run inside your browser. Your questions and searches are processed on your own device and are not sent to our servers.
  • Voice input. The optional microphone button uses your browser's built-in speech recognition. Your browser provider (for example Google in Chrome) may process that audio; we never receive it.
  • No tracking. We do not use advertising trackers or third-party analytics on this website, and we do not store personal data in your browser's storage.
  • Server logs. Like any website, our hosting provider may record basic technical information (such as IP address, browser type and the page requested) to keep the site running and secure.

In the employer programme

When an organisation subscribes to Health Bridge for its workforce, we may process:

  • Employee name and contact details (phone number, email) provided by the employer or by the employee;
  • Eligibility information provided by the employer, such as whether an employee is covered under ESIC, their work location, and their ESIC insurance number where the employee chooses to share it;
  • Service requests, such as a request for help finding a facility, understanding a referral, or checking which documents to carry.

We do not ask for medical records or diagnoses. Please do not share more health information than you need to get help.

2. Why we collect it

  • To reply to your enquiry, support request or demo request;
  • To provide navigation help to employees under an employer's subscription;
  • To produce aggregate, anonymised reports for employers (for example, "40 facility searches this month");
  • To keep our services secure, fix problems and meet legal obligations.

We process personal data on the basis of your consent, or for the specific purpose for which you voluntarily gave it to us, as permitted by the DPDP Act. You can withdraw consent at any time; this does not affect processing already carried out.

3. Who can access it

  • Our team, only the people who need it to help you, under confidentiality obligations.
  • Your employer's HR team sees aggregate or anonymised reports only. HR never sees your individual health questions, the facilities you searched, or the content of your service requests.
  • Service providers (Data Processors) such as our hosting and email providers, who process data only on our instructions.
  • Authorities, only where the law requires it.

We do not sell personal data, and we do not share it for advertising.

4. How long we keep it

Our commitment is to keep personal data only as long as it is needed for the purpose you gave it for:

  • Enquiry and support emails are deleted or anonymised once the matter is closed and no longer needs follow-up, unless you become a customer;
  • Employer programme data is deleted or anonymised when the employer's contract ends, or earlier when it is no longer needed or when you ask us to delete it;
  • Aggregate reports that cannot identify anyone may be kept for longer;
  • We may keep limited records longer only where the law requires it.

5. Your rights

Under the DPDP Act you have the right to:

  • Access a summary of the personal data we hold about you and how we use it;
  • Correction of inaccurate or incomplete data, and to have it updated;
  • Erasure of your data when it is no longer needed, or when you withdraw consent;
  • Grievance redressal, meaning a way to complain to us and get a response;
  • Nominate another person to exercise your rights if you die or become unable to do so.

6. How to delete your data or make a request

Email docotorbrainai@gmail.com with the subject "Privacy request", or use our privacy support form. Tell us what you would like us to do. We may ask you to confirm your identity before acting, so that we do not disclose or delete someone else's data.

7. Grievance contact

If you have a concern about how we handle personal data, contact our grievance contact:

Chetan, DoctorBrainAI.com, Jaipur, Rajasthan, India
Email: docotorbrainai@gmail.com
Phone: +91 81122 31341

We aim to acknowledge grievances within 7 days and resolve them within 30 days. If you are not satisfied with our response, you may approach the Data Protection Board of India.

8. Security

We use reasonable security safeguards to protect personal data. Read our Security page for an honest account of what is in place today and what we require before handling employee health data.

9. Children

Our services are meant for adults. We do not knowingly collect personal data of children (under 18) without verifiable consent from a parent or lawful guardian. If you believe a child has sent us personal data, contact us and we will delete it.

10. Changes to this notice

We may update this notice as our services or the law change. We will change the effective date at the top, and for significant changes we will tell affected users and employers directly.

See also: Terms of Service · Security · Compliance