1. Information we collect
The platform collects profile data for doctors and patients who interact with the website. This includes personal identity information, medical specializations, chamber addresses, contact details, appointment information, and digital content used to build the practice website.
- Doctor identity details such as name, qualifications, specialization, and bio.
- Website content including service descriptions, social links, FAQs, and contact infographics.
- Patient appointment records such as name, phone, age, gender, visit date, and notes.
2. How data is used
Data is used to build and operate the doctor's public website, personalize the practice profile, manage appointment flows, and improve the patient experience. The platform also uses selected information to generate and maintain SEO metadata, contact details, and service pages.
- Generate the live website and doctor profile pages.
- Display chamber schedules, available booking methods, and contact information.
- Support operational tasks such as appointment management and follow-up communication.
3. Data sharing and third-party services
Docxio may use external infrastructure to deliver the service securely. This includes database hosting, media storage, email delivery, and domain verification. Information is only shared with service providers that are required to support storage, delivery, verification, or website publishing.
- Cloud-based media hosting for profile and website imagery.
- Database and application hosting for site data and doctor records.
- DNS verification and domain status checks for custom domain connection.
4. Data retention and deletion
Information is retained for as long as it is needed to operate the doctor's website, fulfill service obligations, and comply with legal or operational requirements. If an account is canceled or a website is removed, the associated records may be deleted according to the service lifecycle and retention policy.
5. Security measures
The platform stores password hashes using bcrypt and uses JWT-based access and refresh tokens for authenticated sessions. Website content, appointment records, and practice metadata are protected by the application's access-control rules and database-layer safeguards.
6. Your rights and contact
Users may request access to the personal information associated with their account or ask for corrections, updates, or deletion of specific records when permitted by the service policy. For privacy inquiries, the doctor or platform administrator should contact the designated support or operations email used by the service.