Privacy policy

Draft for legal review · Last updated 27 Sep 2026

Who we are

ByBookBot ("ByBookBot", "we") provides WhatsApp appointment booking for clinics and labs in India. Address: Hyderabad, Telangana, India.

For patient data, the clinic decides what is collected and why (the data fiduciary under India's Digital Personal Data Protection Act, 2023). We process it on the clinic's behalf. For clinic owners and staff who use ByBookBot, we are the data fiduciary.

What we collect from patients

  • Name and WhatsApp phone number
  • Appointment date, time and doctor
  • Chat messages needed to book, change or cancel appointments

What we don't collect

We don't ask for or store diagnoses, prescriptions, test results or medical records. The bot tells patients not to share medical details in chat and hands those messages to clinic staff.

What we collect from clinics

  • Owner and staff names, mobile numbers and email addresses, for login and support
  • Clinic details: address, timings, doctors, services and fees
  • Billing records, handled with our payment provider Razorpay
  • Contact form details: clinic name, your name, phone, area and message

Consent

The bot's first message tells patients what their details are used for, and how to stop messages (reply STOP) or delete their details (reply DELETE).

Deleting data

  • Patients: reply DELETE on WhatsApp, or ask the clinic. We delete their details within 7 days.
  • Clinics: if you leave, or your pilot ends without upgrading, we delete your clinic's data 30 days later.
  • Contact form leads: we delete them 12 months after our last contact, or sooner if you ask.

Where data is stored

On servers in India. WhatsApp messages pass through Meta's WhatsApp Business Platform, which has its own terms. Emails pass through our email provider.

Who can see it

Only your clinic's owner and staff accounts, each with their own login. Our support team opens a clinic's account only when the clinic asks for help, and each visit is logged.

Security

We use HTTPS, one-time login codes instead of passwords, and daily backups. Login codes are stored in a form that can't be read back.

We never sell data

We don't sell, rent or share patient or clinic details for advertising.

Your rights and complaints

You can ask to see, correct or delete your data. Grievance officer: Tarun, hello@bybookbot.com. We respond within 7 working days.