Privacy Policy
Effective from: 5 October 2026 · Last updated: 5 October 2026 · Version: 1.0
This policy explains what personal data Accucia Softwares Pvt Ltd collects through revisitplus.com and while providing RevisitPlus, why we collect it, how long we keep it and what rights you have. For patient data inside RevisitPlus, your clinic decides how that data is used and we process it only on the clinic's instructions. We never sell personal data and never use patient data to train AI models.
1. Who we are
RevisitPlus is a product of Accucia Softwares Private Limited ("Accucia", "we", "us", "our"), a company incorporated in India.
- Registered office: Office No. 304, 3rd Floor, Sanskriti Arcade, Opp. PCMC School, Kaspate Wasti, Wakad, Pune, Maharashtra 411057, India
- CIN: U72900PN2018PTC181069
- GSTIN: 27AARCA7363G1Z9
- Email: hello@revisitplus.com
- Phone and WhatsApp: +91 888 383 2222
This policy is published under the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 ("DPDP Act") with the Digital Personal Data Protection Rules, 2025 ("DPDP Rules"). Where the DPDP Act and DPDP Rules come into force in phases, we follow their requirements as they apply, and we have built this policy to meet them in full.
2. Two roles we play, and why it matters
| revisitplus.com and our sales process | Patient and clinic data inside RevisitPlus | |
|---|---|---|
| Whose data | Clinic owners, doctors, staff and visitors who contact us | Patients, guardians and clinic staff recorded in the clinic's RevisitPlus system |
| Who decides how it is used | Accucia | The clinic |
| Our role under the DPDP Act | Data Fiduciary | Data Processor, acting for the clinic |
| Which rules govern it | This policy | This policy (Section 9) and the clinic's written agreement with Accucia |
If you are a patient and want to see, correct or delete your health records, please contact your clinic first. The clinic is responsible for your records and for answering your request. If you contact us, we will pass your request to the clinic and help it respond.
3. Personal data we collect on revisitplus.com
| Category | What it includes | Where it comes from |
|---|---|---|
| Contact details | Name, clinic name, city, number of branches, WhatsApp number, email address | The Book a Patient Journey Review form, the Clinic Checklist form, calls, WhatsApp messages and emails you send us |
| Information you choose to share | Notes about your clinic, such as where patients fall out today, and anything you tell us during a Review or in a proposal discussion | You |
| Business and billing details | Legal entity name, GSTIN, billing address, authorised signatory, payment records | You, when you become a customer |
| Technical data | IP address, browser type, device type, pages visited, referring page, approximate location derived from IP, date and time of visits | Your browser, through cookies and server logs |
| Communication records | Call notes, WhatsApp and email history with our team | Our conversations with you |
We do not ask for health information about you on this website. Please do not send us patient details through the website forms, email or WhatsApp.
4. Why we use it, and on what basis
| Purpose | Basis under the DPDP Act |
|---|---|
| To respond to your enquiry and arrange a Patient Journey Review | Your consent, given when you submit a form or contact us |
| To send you the Clinic Operations Checklist on screen and on WhatsApp | Your consent |
| To prepare and send a written proposal | Your consent, and steps you ask us to take before a contract |
| To deliver, configure, support and invoice RevisitPlus after you become a customer | Performance of the agreement you signed, and your consent |
| To send updates about RevisitPlus, new features and relevant articles | Your separate consent, which you can withdraw at any time |
| To understand how the website is used and improve it | Your consent through the cookie banner (analytics cookies only) |
| To keep the website and our systems secure, prevent fraud and maintain logs | Legitimate uses permitted under Section 7 of the DPDP Act and our obligations under the IT Act and CERT-In directions |
| To comply with tax, company, accounting and other laws, and to respond to lawful requests from authorities | Compliance with law |
We do not use your personal data for any purpose that is not listed here without telling you first and, where required, asking for your consent.
5. Consent, and how to withdraw it
Where we rely on consent, we ask for it with a clear notice, in plain language, before we collect your data. You can withdraw consent at any time by writing to hello@revisitplus.com, by replying "STOP" to any WhatsApp message from us, or by using the unsubscribe link in our emails. Withdrawing consent is as easy as giving it.
Withdrawing consent does not affect processing we did before you withdrew it. If you withdraw consent needed to deliver a service you have signed up for, we may not be able to continue that service, and we will tell you so.
6. Cookies
The website uses two kinds of cookies.
| Type | Purpose | Can you refuse it? |
|---|---|---|
| Essential | Keep the site working, remember your cookie choice, protect forms from spam | No. The site cannot work without them |
| Analytics | Count visits and see which pages help clinic owners, using Google Analytics 4 with IP anonymisation | Yes. Choose "Essential only" in the cookie banner or in Cookie settings in the footer |
We do not use advertising cookies or sell cookie data. If we add any other category in future, we will update this policy and ask for your consent first.
7. Who we share personal data with
We share personal data only with service providers who help us run the website and the business, under written contracts that require them to protect it and use it only for our instructions.
| Recipient | Why |
|---|---|
| Cloud hosting and infrastructure providers | To host the website and customers' dedicated RevisitPlus servers |
| WhatsApp Business API providers (Meta Platforms and its approved partners) | To send WhatsApp messages you have asked for |
| Email and calendar providers | To send emails, proposals and meeting invitations |
| Google (Analytics) | To measure website usage, only if you accept analytics cookies |
| Payment and banking partners, including Razorpay where used | To collect and reconcile payments |
| Professional advisers (chartered accountants, auditors, lawyers) | To meet legal, tax and audit obligations |
| Government authorities, courts and regulators | Only where the law requires it, and only to the extent required |
We do not sell, rent or trade personal data. We do not share it with advertisers.
If Accucia is reorganised, for example in a merger or sale of the RevisitPlus business, personal data may pass to the new owner, who must continue to protect it under this policy or a policy at least as protective.
8. Where your data is stored, and transfers outside India
Website and sales data is stored on servers in India or with providers that store data in India where they offer it. Some service providers, such as email and analytics providers, may process data outside India. Any such transfer follows Section 16 of the DPDP Act and is never made to a country the Government of India has restricted.
Each RevisitPlus customer's data sits on that clinic's own dedicated server, set up in India by default. A different region is used only if the clinic asks for it in writing.
9. Patient and clinic data inside RevisitPlus
This section applies to personal data that a clinic records in RevisitPlus, such as patient names, contact numbers, case histories, prescriptions, appointments, payments and staff accounts.
The clinic is the Data Fiduciary. The clinic decides what data to collect from its patients, why, and for how long. The clinic is responsible for giving patients the notice required by law, obtaining their consent where needed, obtaining verifiable consent from a parent or lawful guardian before processing a child's data, and answering patients' requests.
Accucia is the Data Processor. We process this data only to provide RevisitPlus to the clinic and only on the clinic's documented instructions, as set out in the clinic's written agreement with us. In particular:
- We do not use patient data for our own purposes, for marketing, or to train any AI model.
- We do not sell or share patient data with anyone except the sub-processors needed to run the service (cloud hosting, WhatsApp Business API, and payment processing where the clinic turns it on), each bound by written obligations at least as strict as ours.
- Accucia staff access a clinic's system only to set it up, provide support, maintain it, or fix a reported problem, under confidentiality obligations, and every access is logged.
- Data is encrypted in transit and at rest, backed up daily, and protected by access controls set per role and per branch, with an audit trail of who opened or changed a patient record.
- WhatsApp messages to patients are sent from the clinic's own verified business number, using message templates approved by Meta. The clinic is responsible for having its patients' permission to message them.
- The AI Assistant add-on, if a clinic turns it on, answers questions using that clinic's data only. Patient data is not used to train AI models.
- At the end of the agreement, or if the AMC is not renewed, we hand the clinic a full copy of its data and then delete it from the server, as described in our AMC and Refund Terms, unless the law requires us to keep it.
Health information is sensitive personal data under the IT Act rules. We apply the security practices described in Section 11 to all of it.
10. How long we keep personal data
| Data | How long |
|---|---|
| Enquiries and Review bookings that do not lead to a contract | Up to 24 months after our last contact with you, then deleted |
| Marketing contact preferences | Until you withdraw consent, then a suppression record so we do not contact you again |
| Customer contract, invoice and payment records | As long as company, tax and accounting laws require, currently up to eight years |
| Website server and security logs | At least one year, as the DPDP Rules require, and longer if needed to investigate a security incident |
| Analytics data | 14 months in Google Analytics |
| Patient and clinic data in RevisitPlus | As long as the clinic instructs, then handed over and deleted as set out in Section 9 |
When personal data is no longer needed for the purpose it was collected for, and no law requires us to keep it, we delete it or make it permanently anonymous.
11. How we protect personal data
We follow reasonable security practices guided by the IT Act rules and the IS/ISO/IEC 27001 standard those rules refer to. These include:
- Encryption of data in transit (TLS) and at rest
- A dedicated, isolated server for each RevisitPlus customer
- Role-based and branch-based access controls, with the least access needed for each job
- Audit trails and system logs retained for at least one year
- Daily automated backups
- Confidentiality agreements with every employee and contractor who handles personal data
- Regular updates and security patches
No system is completely secure. If a personal data breach happens, we will act straight away to contain it and will notify the people and authorities the law requires. For data we control, we will inform the Data Protection Board of India and affected individuals as the DPDP Rules require, and report cyber security incidents to CERT-In within the time its directions set. For data we process for a clinic, we will inform the clinic without delay and give it the details it needs to meet its own obligations.
12. Your rights
Under the DPDP Act, and subject to its conditions, you have the right to:
- Access: ask for a summary of the personal data we process about you, the processing we do, and who we have shared it with.
- Correction, completion and updating: ask us to fix data that is wrong, incomplete or out of date.
- Erasure: ask us to delete your data when it is no longer needed for the purpose you gave it for, unless the law requires us to keep it.
- Withdraw consent: at any time, as described in Section 5.
- Grievance redressal: raise a complaint with our Grievance Officer and receive a response.
- Nominate: name another person to exercise your rights if you die or become unable to do so.
To use any of these rights, write to the Grievance Officer at the address in Section 13. We may ask you to confirm your identity before we act. We will respond within 30 days, and in any case within the time the law allows.
If you are not satisfied with our response, you may complain to the Data Protection Board of India once you have used our grievance process.
13. Grievance Officer
In accordance with the IT Act, 2000 and the rules made under it, and the DPDP Act, 2023:
- Grievance Officer: Sumeet Katariya, Founder and CEO
- Email: services@accucia.com (subject line "Privacy request" or "Grievance")
- Post: Grievance Officer, Accucia Softwares Pvt Ltd, Office No. 304, 3rd Floor, Sanskriti Arcade, Opp. PCMC School, Kaspate Wasti, Wakad, Pune, Maharashtra 411057
- Phone: +91 888 383 2222, 9 am to 8 pm IST, Monday to Saturday
We acknowledge grievances within 2 working days and resolve them within 30 days.
14. Children
revisitplus.com and our sales process are meant for clinic owners, doctors and staff aged 18 or over. We do not knowingly collect personal data from anyone under 18 through the website. If you believe a child has sent us personal data, write to the Grievance Officer and we will delete it.
Clinics that record children's data in RevisitPlus are responsible for obtaining verifiable consent from the child's parent or lawful guardian, as the DPDP Act and DPDP Rules require. RevisitPlus lets the clinic record guardian details on the patient file.
15. Third-party websites
This website may link to other websites, such as our parent company's site at accucia.com or our videos on YouTube. Those websites have their own privacy policies, and we are not responsible for how they handle personal data.
16. Changes to this policy
We will update this policy when the law, our services or our practices change. The date at the top shows when it last changed. If a change affects how we use personal data you have already given us, we will tell you by email or WhatsApp before the change takes effect and, where the law requires, ask for your consent again. Earlier versions are available on request.
17. Language
This policy is written in English. If you would like it in Hindi or Marathi, or in any other language listed in the Eighth Schedule to the Constitution of India, write to us and we will provide it, as the DPDP Act provides.
RevisitPlus is a product of Accucia Softwares Pvt Ltd, Pune. CIN U72900PN2018PTC181069.
Last reviewed: 5 October 2026 by the RevisitPlus team