Privacy Policy
Drayvenn Lab (“we”, “us”) is an online platform, available at drayvennlab.in, that helps patients find neighbourhood clinics in Bengaluru and request appointments. This policy explains what personal data we handle, why, who sees it, how long we keep it, and what you can do about it. We handle your data in line with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.
What we collect
- Booking details: patient name, age, gender (if given), the mobile number used for the booking, clinic, doctor, date and time slot, and who the booking is for (yourself or a family member).
- Concern note: a short note about the reason for the visit. It is optional. Please keep it brief and do not include reports or detailed medical history.
- Sign-in details (optional): if you sign in to see your bookings, we store your mobile number or email address (or the email of your Google account if you use Google sign-in), your name and age, and any family members you add (name, age, gender, relation). We store a sign-in session in a secure cookie, valid for up to 30 days, so you stay signed in.
- Technical records: basic request and security records, such as rate-limit counters, used to stop abuse and guessing of booking references.
- On your device: the chat assistant keeps its conversation in your browser’s session storage until you close the tab or clear the chat. Nothing in it is stored on our servers.
What we do not collect
- No diagnosis, prescriptions, test reports or medical records
- No payment details. You pay the clinic directly at the clinic
- No precise location, and no advertising or tracking cookies
How we use your data
- To create your appointment request and pass it to the clinic you chose
- To show you your booking status and let you track, reschedule or cancel it
- To sign you in and keep your account secure
- To fix problems, prevent misuse and keep the service running
We use your data only for these purposes. We do not sell it and we do not use it for advertising.
Consent. When you confirm a booking you agree to this policy and to us processing the details above for that booking. You can withdraw consent at any time by asking us to delete your data (see below). Withdrawing does not affect what was done before, and a booking that is still pending or confirmed may be cancelled as a result.
Who sees your data
- The clinic you booked with sees your name, age, gender, mobile number, concern note and appointment details so it can confirm and run your visit. Once it has your details, the clinic handles them under its own practices as well.
- Drayvenn Lab team accesses data only to operate and fix the service.
- Service providers: our hosting and database run on Cloudflare. They process data for us only to provide that infrastructure.
- We may disclose data if the law or a court or authority in India requires it.
Chat assistant
Most questions in the chat assistant are answered on your device without sending anything to us. When a question cannot be answered that way, the text of your message is sent to an AI model run on Cloudflare to write a reply. Booking references and mobile numbers are removed from messages before this happens, but please do not type personal or medical details into the chat. The assistant does not give medical advice. It can only suggest which kind of specialist to see. In an emergency call 108 or 112 or go to the nearest hospital.
Storage and retention
Booking data is stored in a Cloudflare database. When last checked (29 September 2026) Cloudflare reported it as placed in its Western North America region, so your data may be stored and processed outside India. Cloudflare may also keep cached copies as part of normal operation.
Booking records are deleted automatically one year after the appointment date. Account details stay until you ask us to delete them. If you ask for deletion, we act on it within 7 days and confirm.
Your rights
Under the DPDP Act you can:
- ask for a summary of the personal data we hold about you and how it is used
- ask us to correct or update inaccurate data
- ask us to erase your data
- withdraw your consent
- nominate another person to exercise these rights for you if you die or become unable to
- complain to us, and then to the Data Protection Board of India if you are not satisfied with our reply
To use any of these, email hello@drayvennlab.in from the email you used with us, or use the deletion form below. We may ask you to confirm your booking reference and mobile number so that only you can act on your data.
Children
If the patient is under 18, the booking must be made by a parent or legal guardian, who gives consent for the child. We do not knowingly take bookings made by children for themselves.
Security
We use encrypted connections (HTTPS), limit who can see booking details, require both the booking reference and mobile number to view a booking without signing in, and rate-limit repeated attempts. No online service is completely risk free. If a data breach affects you, we will tell you and the authorities as the law requires.
Request data deletion
Enter your booking reference and the mobile number you booked with. Both are needed, so only you can request deletion of your data. If you only have an account and no booking, email us instead.
Contact and grievances
Questions, requests or complaints about your data: email hello@drayvennlab.in or call +91 77355 21019. We reply within 7 days. Please put “Privacy” in the subject line.
Changes
If we change this policy we will update the date at the top. If a change is significant, we will tell you on the site. See also our Terms of Service.