1. Who we are
BapuTalk is a dental clinic management platform operated by BapuTalk Technologies. When we say "BapuTalk", "we", "us" or "our" in this policy, we mean the company that runs this software.
2. What data we collect
- Account information: Name, email address, login records
- Clinic information: Clinic name, address, phone, logo
- Patient records: Names, contact details, medical records, X-rays, invoices, treatment plans — entered by clinic staff
- Payment information: We do not store full card numbers. Payment processing is handled by PayU.
- Usage data: Pages visited, features used, error logs (for improvement purposes)
3. How we use your data
- To provide and improve the BapuTalk service
- To send transactional emails (invoices, appointments, warranty cards)
- To respond to support requests
- To ensure security and prevent fraud
- To comply with legal obligations
4. Data storage & security
All data is stored on servers located in India. We use industry-standard encryption (AES-256) for data at rest and TLS for data in transit. Patient data is scoped strictly to each clinic — no cross-clinic data sharing.
5. Third-party services
We use the following third-party services:
- PayU — for payment processing
- Google OAuth — for optional Google sign-in
- OpenRouter / Groq — for AI (Lalu) features. Prompts do not contain identifiable patient data unless explicitly typed by the user.
- SMS/WhatsApp providers — for appointment reminders
6. Your rights
- Access your data at any time via the clinic panel
- Export your data using the Encrypted Backup feature
- Request deletion of your account by contacting us