Privacy Policy

SutrOS Content Check ("the Service") is operated by Sutros Technologies LLP, CG U 084, DLF Capital Greens, Karampura, New Delhi - 110015 ("we", "us"). This policy explains how we handle your personal data, written with the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable rules in mind.

1. What we collect

• Account details: name, email address, password (stored in hashed form), organisation and user type.
• Professional and practice details you enter: such as qualifications, registration number and council, specialty, experience, biography, clinic names, addresses, phone numbers, hours, fees, services and links.
• Content you submit or create: drafts, captions, scripts, listing text, review replies and the AI review results.
• Consent records: what you agreed to, when, and which policy version.
• Basic technical data needed to run the Service securely, such as sign-in times.

The Service is not designed for patient data. Please do not enter identifiable patient information.

2. Why we collect it

• To create and secure your account.
• To provide the service you request: reviewing content against the NMC guidelines and creating content from your practice profile.
• To keep records of your consents and of changes to your profiles.
• With your separate, optional consent: to send product updates and educational resources, and to give personalised AI-assisted recommendations.

3. How AI is used

When you ask for a review or for content, the relevant text and practice details are sent securely from our servers to an AI service provider to generate the result. We currently use AI models from OpenAI, accessed through Lovable's AI service. We do not use your profiles, drafts or content to train AI models, and we do not use them for marketing without your separate consent. [Confirm provider data-retention terms before launch.]

4. Who else processes your data

• Hosting, database, authentication and file storage: Lovable Cloud.
• AI processing: as described in section 3.
• Email delivery for sign-up and password reset messages.

These providers process data on our behalf. We do not sell your personal data. Data may be processed outside India where permitted by law. [Confirm locations before launch.]

5. How we protect it

Your account is private. Each user can access only their own records; administrators see only usage totals, not your content. Uploaded files are stored privately. AI processing happens on our servers and secret keys are never sent to your browser. We keep an audit record of consent and profile changes.

6. Your rights

• Access and export: download your data any time from My Account → Download my data.
• Correction: edit your profile and practice details any time.
• Deletion: request account deletion from My Account.
• Withdraw consent: turn optional consents off in My Account. We stop the related processing from then on; this doesn't affect processing done before withdrawal.
• Grievance redressal and nomination as provided under the DPDP Act.

7. Contact and grievances

Privacy questions and grievances: rm@sutros.care. If you're not satisfied with our response, you may approach the Data Protection Board of India once it is operational.

8. Changes

We'll tell you about material changes and ask for fresh consent where required.