Privacy Policy
Your medical privacy and personal confidentiality are sacred to us. This policy details how Video Doctor collects, handles, encrypts, and protects patient and practitioner information across all telehealth sessions, appointment bookings, digital prescriptions, and payment workflows.
Protected Health Information & Real-Time Consultation Privacy
Telehealth audio and video streams on Video Doctor are conducted over encrypted WebRTC communication channels. Sessions are never recorded, intercepted, or archived without explicit mutual written consent from both the doctor and patient.
1. Privacy Commitment & Scope
Video Doctor ("we", "us", or "our") operates a digital telehealth platform facilitating secure remote medical counselling, appointment scheduling, real-time video consultations, prescription issuance, and payment processing between registered patients and qualified healthcare practitioners.
This Privacy Policy applies to all individuals who access our website, use our mobile or desktop interfaces, schedule or attend appointments, or interact with our healthcare services. By using Video Doctor, you acknowledge that you have read and understood our data collection, handling, and security practices as described in this document.
2. Information We Collect
To deliver accurate clinical scheduling, telehealth connectivity, and account security, we collect personal and health information through several channels:
👤 Patient Information
- Full legal name, contact email, and mobile phone number.
- Date of birth, biological gender, and residential region.
- Past medical history, symptom notes, allergies, and health queries entered prior to consultations.
- Historical appointment schedules, attendance, and doctor notes.
🩺 Doctor & Practitioner Data
- Medical council registration number and practicing license credentials.
- Specialization degrees, clinical experience, and institution affiliations.
- Government ID copies for KYC identity validation and fraud prevention.
- Bank account / settlement details for receiving consultation earnings.
Additionally, when accessing the platform, we automatically collect basic technical logs including IP addresses, browser specifications, operating system versions, and session timestamps for system stability and intrusion detection.
3. WebRTC Video Call Privacy & Streaming
Live consultations are powered by real-time WebRTC (Web Real-Time Communication) technology with secure signaling channels and Datagram Transport Layer Security (DTLS) and Secure Real-Time Transport Protocol (SRTP) encryption:
- No Default Recording: Video Doctor does not continuously record, listen into, or archive audio or video streams during normal consultations. All streams remain transient and private between you and your practitioner.
- Signaling Telemetry: Our signaling servers only handle connection handshake protocols, ICE candidates, and session state coordination (such as room entry, exit, and network latency indicators).
- Strict Anti-Capture Policy: Both patients and doctors are contractually and legally prohibited from taking screen recordings, screen captures, or unauthorized audio recordings without express written agreement.
4. How We Use Collected Information
We use your data solely to operate, improve, and secure healthcare delivery:
- Consultation Delivery: Matching patients with licensed specialists and establishing video connections.
- Clinical Prescriptions: Permitting doctors to generate and securely transmit official digital prescriptions (PDF) to the patient profile.
- Transactional Communications: Dispatching one-time passwords (OTP), appointment confirmations, calendar links, reminders, and payment receipts.
- Practitioner Verification: Conducting rigorous manual and automated verification of medical licenses before doctors are granted platform privileges.
- Audit & Legal Compliance: Preserving mandatory medical and financial records as mandated by applicable healthcare statutes and tax authorities.
5. Payments, Invoicing & Stripe Security
All patient counselling fees on Video Doctor are charged in United States Dollars ($ USD) through our accredited global payment gateway partner, Stripe.
💳 PCI-DSS Level 1 Compliance
Video Doctor does not store, transmit, or have access to your full credit card numbers, debit card numbers, or CVV/CVC security codes on our application servers. Payment data is tokenized directly within Stripe's PCI-DSS Level 1 certified infrastructure. We receive only transaction confirmations, currency amounts, and masked card identifiers (such as the last 4 digits) for invoice reconciliation.
Doctor payout and settlement records are managed in accordance with applicable financial reporting laws. Platform commission deductions configured on the administrative dashboard are processed strictly for operational facilitation and are never shared with unauthorized external entities.
6. Digital Prescriptions & Medical Records
Medical prescriptions generated following a consultation contain patient demographics, clinical diagnoses, prescribed medications, dosage schedules, and doctor registration details:
- Prescriptions are formatted as tamper-resistant digital PDF files and are encrypted at rest using industry-standard AES-256 storage protocols.
- Access to prescriptions is strictly limited to the patient account for whom it was created and the specific prescribing practitioner.
- Medical records are maintained in compliance with statutory clinical retention standards, ensuring patients have ongoing access to their historical treatment documents.
7. Third-Party Sharing & Zero-Sale Guarantee
Our Explicit Guarantee:
We never sell, rent, monetize, or disclose your personal identifiable information, medical symptoms, diagnoses, or consultation records to advertisers, pharmaceutical marketing firms, or data aggregators.
We disclose information strictly under the following limited operational circumstances:
- With Your Consulting Doctor: Providing the booked physician with relevant patient medical history and notes necessary to render accurate medical guidance.
- Vetted Infrastructure Vendors: Secure third-party technology providers supporting cloud hosting, transactional email/SMS delivery, and payment processing under enforceable Data Protection Agreements (DPAs).
- Legal & Regulatory Mandate: When required by lawful judicial subpoena, statutory court order, or authorized governmental health safety enforcement.
8. Encryption & Data Protection Architecture
We deploy defense-in-depth technical, physical, and administrative safeguards to secure personal and medical data:
TLS 1.3 In-Transit
Every byte exchanged between client browsers and our servers is secured via 256-bit TLS/SSL encryption.
AES-256 At Rest
Sensitive database entries, medical prescriptions, and KYC credentials are encrypted on disk with AES-256.
Strict Role Isolation
Rigid role-based access control (RBAC) isolates Admin, Doctor, and Patient access privileges.
9. Your Rights & Data Retention Rules
Depending on your jurisdiction, you have robust rights regarding your personal information:
- Right of Access: You can view, download, or review your active account data, appointment logs, and digital prescriptions at any time through your dashboard.
- Right of Rectification: You can update or correct outdated demographic details, telephone numbers, and profile information.
- Right of Deletion (Account Closure): You may request account deactivation and deletion of personal profile data. However, please note that clinical health records, prescriptions, and financial transaction invoices must be retained for the minimum statutory period mandated by applicable medical and taxation regulations.
- Right to Withdraw Consent: You may unsubscribe from marketing or informational announcements through the link provided in our emails.
11. Children's & Minor Healthcare Privacy
Video Doctor does not knowingly collect personal information directly from individuals under the age of 18 without parental involvement. Telehealth consultations for minors must be initiated, scheduled, and attended by a custodial parent or legal guardian who provides informed consent for the minor's medical consultation.
If we learn that a minor has submitted personal identifiable information without verifiable parental consent, we will promptly delete that information in accordance with applicable legal guidelines.
12. Privacy Inquiries & Grievance Redressal
If you have questions, concerns, requests to exercise your data rights, or complaints regarding how your personal information is processed on Video Doctor, please reach out to our dedicated Data Protection Officer:
Data Protection & Privacy Officer
Email: privacy@videodoctor.net
General Support: support@videodoctor.net
Organization: Video Doctor Healthcare Technologies
We acknowledge all privacy requests within 48 business hours and process verifiable data requests within the statutory timeframe prescribed by law.