Privacy Policy

Your trust is at the core of PILLS. This Policy explains what we collect, why, and how we protect it.

What we collect

Account details (name, email, phone), addresses, prescriptions you upload, order history, payment confirmations (we never store card numbers — Zoho Payments tokenises them), device tokens for push notifications, and basic analytics.

Why we collect it

To fulfil your orders, verify prescriptions, prevent fraud, predict refills, comply with regulatory requirements (Drugs & Cosmetics Act, IT Act), and improve our products.

How we protect it

Encryption-at-rest (AES-256) and in-transit (TLS 1.3), prescription watermarking on upload, MongoDB role-based access for staff, mandatory 2FA for admins, periodic third-party security audits.

Who we share it with

Only with: (a) verified pharmacists for prescription review, (b) Shiprocket for fulfillment, (c) Zoho Payments for payment processing, (d) Indian regulators when legally compelled. We never sell your data.

Your rights

Request export, correction or deletion of your data anytime via Account → Security → Data requests. We respond within 30 days.