Privacy
summary.to is operated under Indian law and follows the Digital Personal Data Protection Act, 2023 (DPDPA). This page is a placeholder. A full privacy notice will replace it before paid features go live.
What this page will cover
- Who the data fiduciary is and how to contact us.
- What personal data we collect (account, contact, professional, billing).
- What patient data we receive on a specialist's behalf and how it is processed.
- Purposes of processing, lawful basis, retention periods.
- Sub-processors (Google for OAuth, Razorpay for payments, our cloud hosts).
- Your rights under DPDPA — access, correction, grievance redressal.
- How to contact the data protection officer.
In the meantime
For privacy questions, write to privacy@summary.to. For patient data handled through a specialist's link, the specialist is the primary fiduciary; summary.to acts as a data processor on their instructions.
This is placeholder content. It is not legal advice and not the final privacy notice.