Privacy Policy

1. Introduction

NutriCRM ("we," "our," or "us") operates the NutriCRM platform, including the website at nutricrm.co and the application at app.nutricrm.co. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

We are committed to protecting your privacy and handling your data in an open and transparent manner. This policy complies with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 of India.

2. Information We Collect

2.1 Account Information

When you register for NutriCRM, we collect:

• Name and email address
• Phone number
• Organization/practice name
• Professional credentials (for dietitians)
• Password (stored in encrypted form)

2.2 Client Health Data

Dietitians using NutriCRM may store their clients' health information, including:

• Health vitals and measurements
• Diet plans and nutritional information
• Medical history and health goals
• Consultation notes

This data is entered and controlled by the dietitian. NutriCRM acts as a data processor on behalf of the dietitian (the data controller).

2.3 Payment Information

Payment processing is handled by our third-party payment providers (Razorpay and Dodo Payments). We do not store complete credit card numbers or bank account details on our servers. We may receive and store:

• Transaction IDs and payment status
• Billing address
• Last four digits of payment cards (for display only)

2.4 Usage Analytics

We automatically collect certain information when you use our platform:

• IP address and device information
• Browser type and version
• Pages visited and features used
• Time spent on the platform

2.5 Cookies

We use essential cookies for authentication and session management. We may also use analytics cookies to understand how users interact with our platform. You can control cookie preferences through your browser settings.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send administrative notifications and updates
• Respond to customer service requests
• Monitor and analyze usage patterns
• Detect, prevent, and address technical issues
• Comply with legal obligations

4. Data Sharing

We do not sell your personal information. We may share data with:

• Payment Processors: Razorpay and Dodo Payments for processing subscription payments
• Email Service: Resend for sending transactional emails and notifications
• Analytics Providers: To understand platform usage and improve our services
• Legal Authorities: When required by law or to protect our rights

5. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure password hashing
• Regular security assessments
• Access controls and authentication
• Secure cloud infrastructure

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. We may retain certain information as required by law or for legitimate business purposes.

Client health data is retained according to the dietitian's account status. When a dietitian's account is closed, we provide options to export or delete all associated client data.

7. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (subject to legal requirements)
• Export: Request your data in a portable format
• Withdraw Consent: Withdraw consent for data processing where applicable

To exercise these rights, please contact us at [email protected].

8. Children's Privacy

NutriCRM is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the platform after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Website: nutricrm.co/contact