Privacy Policy

This Privacy Policy explains how Slotlii Technologies ("Slotlii", "we", "us" or "our") collects, uses, shares and safeguards information when you visit slotlii.com or use the Slotlii clinic operating system (collectively, the "Service").

By using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

Slotlii provides software that healthcare providers ("Clinics") use to manage appointments, patient records, prescriptions and communications with their patients ("Patients").

When Patients interact with us

If you are a Patient interacting with a Clinic that uses Slotlii (for example, booking an appointment over WhatsApp), the Clinic is the primary "data fiduciary" for your personal information, and Slotlii acts as a "data processor" on the Clinic's behalf. Please refer to your Clinic's privacy notice for details specific to that relationship. This policy describes Slotlii's role and practices.

When Clinic users interact with us

If you are a doctor, receptionist, manager or other Clinic staff using Slotlii on behalf of a Clinic, this policy describes how we handle your account information directly.

Account information

When a Clinic signs up, we collect contact and billing information for the Clinic and login credentials and profile details for each Clinic user (name, email, mobile number, role, professional registration number where applicable).

Clinic operational data

Information your Clinic enters into Slotlii in the ordinary course of operation — appointments, services, working hours, doctor schedules, billing records, invoices and similar.

Patient information

Information your Clinic stores about its Patients, which may include name, contact details, demographic information, visit history, vital signs, clinical notes, prescriptions, lab reports, images and payment records. We process this information solely on the Clinic's behalf and only as needed to provide the Service.

WhatsApp & communications data

When Patients or Clinics interact with Slotlii's WhatsApp booking bot via the WhatsApp Business API, we receive and store the message content, timestamps, phone numbers and any media shared in the conversation, so we can power booking, reminders and follow-ups.

Usage & device data

We collect log information automatically when you use the Service, including IP address, device and browser type, operating system, pages visited, referring URLs, and timestamps. This helps us secure the Service and understand how it is used.

Cookies & similar technologies

We use a small set of cookies and similar technologies to keep you signed in, remember preferences and measure aggregated usage. See section 12 for details.

We use information to:

• Provide, operate and maintain the Service for your Clinic.
• Authenticate users, secure accounts and prevent fraud or abuse.
• Deliver appointment confirmations, reminders, prescriptions and other Clinic-initiated messages to Patients over WhatsApp, SMS or email.
• Process payments and issue invoices.
• Communicate with Clinic users about service updates, billing, support and changes to terms or policies.
• Diagnose technical issues, monitor performance and improve the Service.
• Comply with applicable laws and respond to lawful requests.

We do not sell personal information. We share information only in the limited circumstances described below.

Service providers

We use trusted vendors to operate the Service. They process information only on our instructions and under written agreements. Categories include:

• Cloud hosting and storage providers (used to host the Service inside India where possible).
• WhatsApp Business Solution Providers (such as Gupshup, AiSensy, or Meta Cloud API) that route messages to and from the WhatsApp platform.
• Email and SMS delivery providers.
• Payment gateways that process subscription payments.
• Error monitoring, analytics and customer support tools.

Within your Clinic

Information you enter into the Service is accessible to other authorised users of your Clinic according to the access controls you configure.

Legal & safety

We may disclose information if we reasonably believe it is required to comply with applicable law, legal process, lawful government requests, or to protect the rights, property or safety of Slotlii, our users or others.

Business transfers

If Slotlii is involved in a merger, acquisition, financing or sale of assets, information may be transferred as part of that transaction. We will give notice before any such transfer becomes subject to a different privacy policy.

Slotlii uses the official WhatsApp Business API, accessed through authorised Business Solution Providers. When you interact with a Clinic over WhatsApp:

• WhatsApp messages are governed by WhatsApp's own terms and privacy policy in addition to this policy.
• Message templates used for notifications (appointment confirmations, reminders, prescriptions) follow Meta's WhatsApp Business policies.
• You can stop receiving messages at any time by replying STOP or by asking the Clinic to remove your contact details.

We retain personal information for as long as the Clinic's account is active and for a reasonable period thereafter to comply with legal, tax, audit, dispute-resolution and recordkeeping obligations.

Clinics can export their data at any time and may request deletion of their account, at which point we will delete or anonymise their data within a reasonable period, except where retention is required by law.

We take security seriously and have implemented technical and organisational measures appropriate to the nature of the information we handle, including:

• Encryption of data in transit (TLS) and at rest.
• Role-based access controls so users see only the information they need.
• Audit logs for sensitive actions.
• Daily automated backups with restoration procedures.
• Hosting on infrastructure inside India, with hardened network configuration.
• Regular review of vendor security practices.

No system is fully secure. If you become aware of an incident, please contact us at security@slotlii.com.

Slotlii is built primarily on infrastructure inside India. Where a limited number of supporting services (for example, email delivery or error monitoring) are located outside India, we take reasonable steps to ensure appropriate safeguards are in place before any transfer.

Subject to applicable law, you have rights with respect to your personal information, which may include:

• Access — request a copy of the personal information we hold about you.
• Correction — ask us to correct inaccurate or incomplete information.
• Deletion — ask us to delete personal information, subject to legal exceptions.
• Portability — request a machine-readable export of certain information.
• Withdrawal of consent — where we rely on consent, you can withdraw it at any time.
• Grievance — raise a complaint about how we handle your information.

If you are a Patient, please direct these requests to your Clinic in the first instance, as your Clinic controls how your information is stored and used. Clinic users and direct contacts can write to us at privacy@slotlii.com.

Slotlii is intended for use by healthcare providers and their staff, not by minors directly. Clinics that use Slotlii to manage information about minor patients do so as the data fiduciary for those records and are responsible for obtaining any necessary consents from parents or guardians.

We use a small number of cookies and similar technologies to:

• Keep you signed in to your Slotlii account.
• Remember your preferences (such as language).
• Measure aggregated usage to help us improve the Service.

Most browsers allow you to refuse or delete cookies through their settings. Doing so may affect parts of the Service that rely on them.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of the page and, for material changes, notify Clinic account owners by email or through the Service.

For questions or requests regarding this Privacy Policy, please contact us at:

Slotlii Technologies
Email: privacy@slotlii.com
Security disclosures: security@slotlii.com
India