Privacy Policy & Data Protection

1. Introduction & DPDP Act Framework

This Privacy Policy describes how AqNoorLabs ("Data Fiduciary", "we", "our", or "us") collects, processes, stores, and protects personal data provided by users ("Data Principals", "you") when utilizing the MyMedicare Windows desktop application, website, and subscription billing systems under the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.

2. Personal Data Collected & Purpose Limitation

We strictly limit the collection of personal data to what is necessary for software licensing, user verification, and customer support:

• Contact Information: Full Name, Pharmacy Business Name, Mobile / WhatsApp Number, and Email Address.
• License & Transaction Data: Software License Key, Payment Reference ID, Subscription Tier, and Renewal Dates.
• System Specifications: Windows OS Version (64-bit) for technical troubleshooting and compatibility verification.

Note: Patient prescription data and retail customer records entered into the MyMedicare software remain exclusively stored on your local computer storage device.

3. Rights of Data Principals under DPDP Act 2023

As a Data Principal under India's DPDP Act 2023, you possess the following explicit statutory rights:

• Right to Access Information: Request a summary of personal data held by AqNoorLabs and processing activities undertaken.
• Right to Correction & Erasure: Request the correction of inaccurate data or complete erasure of your registration profile when no longer necessary.
• Right of Grievance Redressal: Submit grievances regarding data processing directly to our designated Data Protection Officer.
• Right to Nominate: Nominate an individual to exercise your data rights in the event of incapacity or death.

4. Payment Processing via Razorpay (PCI-DSS)

All online subscription payments for MyMedicare are processed through Razorpay, a PCI-DSS certified payment gateway compliant with Reserve Bank of India (RBI) directives. AqNoorLabs does not store or process debit/credit card numbers, UPI PINs, or banking credentials on our infrastructure.

5. Data Retention & Security Safeguards

We implement industry-standard encryption protocols (TLS/SSL) for all online communications and licensing requests. License registration details are retained only for the active duration of your subscription plus statutory accounting periods required under Indian tax laws.