Privacy Policy

1. Information We Collect

We collect only the information needed to provide the Services:

• Account information: name, phone number, email address, business name, address and login credentials.
• Pharmacy and business information: drug license details, GST details, inventory, purchase and sales records, and supplier and distributor details.
• Patient information (handled by pharmacies): basic details such as name, phone number, delivery address and prescriptions, needed by the pharmacy to deliver medicines.
• Google user data: if you choose to connect your Gmail account, we access limited Gmail data as described in Section 4.
• Technical information: device type, browser, IP address, app version and logs, used to keep the Services secure and working.

2. How We Use Information

We use the information we collect only to:

• provide, operate and maintain the Services, including pharmacy management, ordering and billing
• process orders and enable medicine delivery to patients
• provide customer support and respond to your requests
• keep the Services secure, prevent fraud and fix technical issues
• send service-related notifications, such as order updates and account alerts
• comply with applicable laws and regulations

We do not sell your personal information to anyone.

3. Google User Data (Gmail Integration)

Connecting your Gmail account to eVital is optional. If you choose to connect it, this section explains exactly how we handle your Google user data.

3.1 Data we access

• Read access (gmail.readonly): email messages and attachments in your Gmail account, used only to identify order confirmation and invoice emails from your suppliers and distributors.
• Send access (gmail.send): the ability to send emails from your Gmail address, used only when you initiate sending from within eVital.

3.2 How we use Google user data

We use Google user data only to provide and improve user-facing features of eVital that are visible to you:

• extracting order details (such as items, quantities, prices and invoice numbers) from supplier emails and showing them in your eVital dashboard
• sending order-related emails, such as purchase orders and order confirmations, to your suppliers when you click Send

We do not use Google user data for any other purpose.

3.3 What we never do with Google user data

• We do not use it for advertising of any kind, including targeted, personalized, retargeted or interest-based advertising.
• We do not sell it, or provide it to data brokers or information resellers.
• We do not use it to determine credit-worthiness or for lending purposes.
• We do not use it to create databases unrelated to providing the Services to you.
• We do not use Google Workspace API data to develop, improve or train generalized or non-personalized AI or machine learning models.
• We do not allow humans to read your emails, unless you give explicit consent for specific messages (for example, for support), it is necessary for security purposes such as investigating abuse, it is required to comply with law, or the data is aggregated and anonymized for internal operations.

3.4 Sharing of Google user data

We do not share, transfer or disclose Google user data to third parties, except:

• with service providers that help us operate the Services (such as cloud hosting), only to provide the features described above and under strict confidentiality obligations
• when required by law, regulation or legal process
• as part of a merger, acquisition or sale of assets, with prior notice to you

3.5 Storage, retention and deletion of Google user data

• OAuth access tokens are encrypted and stored securely, and are used only to provide the features above.
• We store only the order details extracted from supplier emails, not your full mailbox.
• Extracted order data is kept only while your eVital account is active or as needed to provide the Services.
• You can disconnect Gmail at any time from eVital Settings, which revokes our access. You can also revoke access from your Google Account at https://myaccount.google.com/permissions.
• You can request deletion of your Google user data by emailing support@evital.in. We will delete it within 30 days.

3.6 Limited Use

eVital's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Sharing of Information

No third party has access to your information except in these cases:

• Pharmacies: basic patient details are shared with the pharmacy serving the patient, only to deliver medicines. Pharmacists are already trusted by our users and are bound by their own professional and ethical privacy obligations.
• Service providers: trusted partners who help us run the Services (such as cloud hosting, SMS and payment providers), only for that purpose and under confidentiality obligations.
• Legal requirements: when required by law, court order or a government authority.

5. Data Security

We protect your information with industry-standard safeguards, including:

• encryption of data in transit (HTTPS/TLS) and encryption of sensitive data at rest
• role-based access controls, so only authorized systems and personnel can access data
• regular security reviews, monitoring and software updates

No method of storage or transmission is 100% secure, but we work continuously to protect your data.

6. Data Retention and Deletion

We keep your information only as long as your account is active, or as needed to provide the Services and meet legal, tax and regulatory requirements. When data is no longer needed, we delete or anonymize it.

You can request deletion of your account and data at any time by emailing support@evital.in. We will process your request within 30 days, except where we are required by law to retain certain records.

7. Your Rights

Subject to applicable law, including India's Digital Personal Data Protection Act, 2023, you can:

• access the personal information we hold about you
• correct inaccurate or incomplete information
• withdraw consent, including disconnecting your Gmail account at any time
• request deletion of your information

To exercise these rights, contact us using the details below.

8. Children's Privacy

The Services are not directed at children under 18. We do not knowingly collect personal information from children without verifiable parental consent.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, especially to how we use Google user data, we will notify you through the Services or by email before the changes take effect. The "Last updated" date below shows when this policy was last revised.

10. Contact Us

If you have questions about this Privacy Policy or your data, contact us:

• Company: Equality Healthcare Private Limited
• Email: support@evital.in
• Phone: 90 33 99 03 03 (9 am to 6 pm, Mon to Fri)
• Address: Office B, 3rd Floor, 4D Square Mall, below PVR Cinema, Motera, Ahmedabad, Gujarat 380005

Last updated: 3rd October, 2026