Privacy Policy

Aidotics provides software that care businesses (“bureaus”) use to manage clients, coordinate duties, and communicate with care professionals (“partners”).

Aidotics is not a nursing bureau, placement agency, employer, healthcare provider, emergency service, or verification / background-check agency. Aidotics does not select, engage, deploy, supervise or pay partners. Bureaus do.

Roles under the Digital Personal Data Protection Act, 2023 (DPDP):

• For partner accounts, KYC files Aidotics hosts, availability, device and location collected by the Partner app — Aidotics is typically the Data Fiduciary.
• For client / patient / lead / duty data a bureau enters — the bureau is the Data Fiduciary; Aidotics processes it to provide the software.
• When a bureau views, exports or shares a partner profile — the bureau is Data Fiduciary for that use/disclosure.

We acknowledge privacy requests within 48 hours and aim to respond within the period required by law (and in any event within 30 days where applicable).

You may also approach the Data Protection Board of India or other competent authorities. See also our Grievance Redressal page.

Data: If you submit an enquiry or booking form — name, email, phone, business name, message content. Servers also record technical data (IP, browser, pages).

Purpose: Respond to enquiries; contact you about Aidotics products. Optional marketing only if you tick a separate unticked box.

Cookies: We use storage necessary to operate the site. We do not use advertising, profiling or cross-site tracking cookies. If that changes, we will seek consent before non-essential cookies.

Retention: Enquiry records up to 3 years.

4.1 Data we collect

We do not sell personal data. We do not use patient, client or partner data for advertising.

4.2 Documents — preview is not verification

You upload identity, qualification and (if any) police verification documents so bureaus can consider you.

Aidotics staff may preview files only for legibility, completeness, expected type, and obvious alteration. A file may be rejected on those grounds alone.

Aidotics does not verify documents. We do not contact issuing authorities, police, or government databases, and we do not assess your character, competence, health or fitness.

Police verification is your responsibility. Aidotics does not arrange, conduct, pay for, or charge for it. If you upload one, we display it as a document you provided.

The bureau must independently verify you before engagement. Any status in software means only that a file was submitted or previewed — not that Aidotics cleared you.

4.3 Aadhaar and sensitive identity data

Where Aadhaar is collected, it is only to enable bureaus to consider you for work and to operate the platform. Prefer masked Aadhaar / Virtual ID where the product allows. Do not upload Aadhaar unless required for listing.

Full Aadhaar images should not be shared with clients unless the bureau has a genuine need for that placement. Digital signature, bank proof and videos are never included in client share packs. Rejected documents are never shared.

4.4 Location

When: While Availability is ON, and while you are on an active duty. If availability is off and you have no active duty, we do not collect location.

How often: Roughly every 15 seconds, or on short movement, while collection is on.

Why: Nearby work; bureau matching; arrival / attendance; safety / support during duty.

Android: During an active duty, location may continue in background or with screen off for attendance. iPhone: while the app is open (as permitted by iOS).

Control: We explain purpose before the OS prompt. You may refuse or revoke in settings. Without location, nearby work and arrival recording generally will not work. Turning Availability OFF stops availability-based collection.

4.5 Who at bureaus can see and share your data

Bureau staff linked to you may see your profile (name, photo, phone, address, emergency contacts, history) and uploaded documents.

Staff may generate a profile PDF for a prospective client. If they choose “with documents”, the PDF may include identity / qualification images (possibly Aadhaar / PAN). Bank proof, videos and rejected docs are excluded.

Once sent from their device (for example WhatsApp), Aidotics does not control, watermark, or log each share. The bureau is legally accountable for that disclosure. Concerns: raise with the bureau and grievance@aidotics.in. Account deletion stops future in-app sharing; it cannot recall a file already sent.

4.6 How you agree (consent / notice)

At registration the app shows Partner Terms and this Policy and requires an unticked checkbox before continue. Separate notices appear before location permission and on document upload. You may withdraw consent by deleting your account or writing to grievance@aidotics.in, subject to legal retention and active-duty needs.

5.1 Bureau owners / admins

Business identity and tax details, owner details, KYC (PAN, GSTIN, ID proof), bank details for billing, login / session data, Razorpay payment records, support correspondence — to run the workspace, bill, support, and comply with law. Where identity or face verification (for example Didit or similar) is enabled at onboarding, that processing is for business verification only.

5.2 Staff (BMS mobile / web)

Name, employee ID, email / phone, role, tokens, device identifier, device / OS, crash logs, location while using field features.

Device binding: one registered device per staff login; new device may be held up to 48 hours. Identifier used only for this security control.

Staff access is created by the bureau. The bureau must inform staff of this Policy and of device binding.

5.3 Client / patient / lead data entered by the bureau

Bureau = Data Fiduciary. Aidotics processes to provide software. Lawful basis, notices and rights for those persons are the bureau’s responsibility. We route such requests to the bureau. Collect only what operations require; do not upload health information beyond that need.

Partner KYC may currently be stored in Korea. Bureau / client data may be in Australia / Mumbai. Processors (for example Expo, Resend) may process in the United States or other regions.

By using the Service you acknowledge cross-border processing as disclosed. We use contractual / technical safeguards and are working to consolidate storage in India where practicable.

HTTPS / TLS; hashed passwords where used; role-based access; device binding for staff; least-privilege internal access; monitoring.

Sessions: web — browser storage; Partner — app storage; BMS — device keystore. Sessions are not shared across products. Sign out on shared devices.

No system is perfectly secure. We do not guarantee prevention of every unauthorised access or loss.

Deletion does not remove records we must keep by law.

Access, correction, erasure, withdrawal of consent (where processing is consent-based), and grievance redressal — grievance@aidotics.in. We may verify identity. Partners may start deletion in Settings → Delete Account. Data export is prepared manually on request. See Account deletion.

If your request concerns data a bureau controls, we will refer you to that bureau and assist them.

Partners and bureau staff must be 18+. Minors receiving care: bureau must have lawful parental / guardian authority.

Version / date will update. Material changes: notice by email or in-app before effect where required. Continued use after the effective date means you accept the revised Policy where permitted by law.

Aidotics Private Limited · grievance@aidotics.in · 9310433362
WeWork DLF Forum, Cybercity Phase III, Gurugram, Haryana 122002