Privacy Policy
Last Updated: September 27, 2026
Medixy ("Medixy", "we", "us" or "our") is committed to protecting the privacy and security of every individual who interacts with our website and services. This Privacy Policy explains what personal information we collect, how we use it, how we protect it, and what rights you have regarding your information. It applies to all visitors, users and clients of medixy.co.in and all associated subdomains.
By using our website or engaging with our services, you acknowledge that you've read and understood this Privacy Policy.
1. Information We Collect
1.1 Information You Provide Directly — Full name, hospital or clinic name, professional role, email address, phone number, city, Growth Engine interests, and any other information you voluntarily provide.
1.2 OTP Verification Information — When you complete OTP verification, we collect and verify your email or phone number to confirm authenticity. OTP codes are never stored in plain text after verification.
1.3 Information Collected Automatically — IP address, browser type, device type, pages visited, referring source, UTM parameters.
1.4 Cookies and Tracking — We use cookies to improve your experience, analyse traffic, and measure marketing effectiveness. You can control cookies through your browser settings.
2. How We Use Your Information
- To respond to your enquiries and provide requested services
- To verify form submissions through OTP verification
- To send relevant information about our Growth Engines
- To send newsletters if you've subscribed
- To manage your Earn With Us partner account, if applicable
- To sync verified lead information to our internal Google Sheets for team follow-up
- To comply with legal obligations under the Digital Personal Data Protection Act 2023
- To protect the security and integrity of our website
3. Legal Basis for Processing
Under the DPDP Act 2023, we process your data on the basis of consent, contractual necessity, legitimate interests, and legal obligation, as applicable to each interaction.
4. Data Storage & Security
Your information is stored securely in encrypted databases hosted on secure servers located in India. We use HTTPS/TLS encryption, bcrypt hashing for passwords and OTP codes, role-based access control, regular backups, and two-factor authentication for administrative access. Enquiry data is retained for a minimum of 3 years; you may request deletion at any time, subject to legal retention obligations.
5. Data Sharing
5.1 Medixy does not sell, rent or trade your personal information to any third party under any circumstances.
5.2 Service Providers — We share information with trusted providers including our SMS/OTP gateway (MSG91), email service provider, cloud hosting provider, and Google Analytics — all contractually obligated to protect your data.
5.3 We may disclose information if required by law, court order, or government authority.
5.4 Google Sheets — Verified lead information is synchronised to secure Google Sheets accessible only to authorised Medixy team members.
5.5 Earn With Us Partner Data — Partner information is stored securely per our program's record-keeping requirements.
6. Your Rights Under the DPDP Act
You have the right to access, correct, and request erasure of your data, raise a grievance with our Data Protection Officer, and nominate another individual to exercise your rights. Contact our DPO at privacy@medixy.co.in.
7. OTP Verification
- OTP codes are valid for 10 minutes only
- Never stored in plain text — only as bcrypt-hashed values
- Maximum 3 attempts before a 30-minute lockout
- Delivered via Email or SMS (via MSG91), your choice at submission
8. Children's Privacy
Our website is designed for healthcare professionals and business decision makers. We don't knowingly collect information from individuals under 18.
9. Changes to This Policy
We may update this policy periodically. Material changes will update the "Last Updated" date above.
10. Contact & Grievance
Medixy, Gurgaon, Haryana, India
Email: privacy@medixy.co.in
If your concerns aren't resolved directly, you may approach the Data Protection Board of India under the DPDP Act 2023.