What Canipus knows about you, and who else gets to know it.

Canipus Private Limited, CIN U62011GJ2025PTC170291, registered at Shop No. 22, First Floor, Jalaram Chambers, Karelibaug, Vadodara 390018, Gujarat, India. In the language of the Act, Canipus is the Data Fiduciary for everything described here. The person to write to is named at the bottom of this page.

A doctor's ID card is the most personal thing on Canipus, so it is held more carefully than anything else.

• It is stored in a private place that nothing on the open web can reach. There is no address you can guess and no link that works twice.
• The only person who sees it is the person at Canipus who has to decide whether to confirm you, and they see it through a link that stops working five minutes after it is made.
• Where the file actually sits is never handed to any browser, including theirs.
• It is never shown to a company, never shown to another doctor, and never used for anything except answering the one question: is this person a doctor.
• When your card is confirmed or refused, the decision and the reason are kept. The photograph itself you can ask to have deleted, and that request is not refused.

Four kinds of people, and no others.

1. A company you send an enquiry to. It gets your name, your specialty and your city, and whatever you wrote. It does not get your email address or your telephone number unless you put them in the message yourself. If you never send an enquiry, no company on Canipus ever learns you exist.
2. A person at Canipus. Only to answer a question that needs a person: is this an ID card, does this licence number belong to this company, is this complaint about a real problem. Every such decision is written down with the date.
3. The three companies that run the machinery. Supabase holds the database and the files, Razorpay takes the payments and Canipus never sees or stores your card number, and Resend carries the mail. Each does one job under contract, and none of them may use anything for their own purposes.
4. A court, or a government office that is entitled to ask. Only what is actually asked for, and only where refusing would be unlawful.

A record a company publishes is public: its name, what it is for, the company and its city, the register and the number, the price if the company chose to show one, and the film. That is the point of publishing. A doctor's profile, a doctor's enquiries and everything a doctor reads are not public and are not shown to other doctors.

• While your account is open, everything above stays, because the account needs it to work.
• When you close your account, your profile and your records come off Canipus. Give it thirty days to be gone from the working copies and the backups.
• An enquiry you sent and the answer to it stay with the other person, because it is their record of a conversation they were in as well.
• Invoices and payment records are kept for eight years, which is what tax law requires of a company in India.
• A decision the desk made, and why, is kept as a record of a decision, without the photograph.

Under the Act these are yours, and asking costs nothing.

• To see it. A copy of what Canipus holds about you and who it has been shared with.
• To correct it. Most of it you can change yourself on your own profile. The rest, ask.
• To have it erased. Unless a law requires it to be kept, such as an invoice, or somebody else's record of a conversation depends on it.
• To take back your consent. Any time, and as easily as you gave it.
• To name somebody who may act for you if you cannot, through death or incapacity.
• To complain. To Canipus first, and to the Data Protection Board of India if Canipus does not put it right.

Write to hello@canipus.com from the address on your account. You get an answer, with what was done, within thirty days.

Canipus sets no advertising cookies and there is nothing here to track you across other websites. Two things are stored on your own device: the token that keeps you signed in, and the text size you chose. Clearing your browser's storage removes both, and the only thing you lose is being signed in.

Canipus is for companies, doctors and hospitals, and is not for anybody under eighteen. No account is knowingly opened for a child, and if we learn of one it is closed and what it holds is deleted.

If personal data is lost or reaches somebody it should not have, Canipus tells the people affected and the Data Protection Board of India, as the Act requires, and says what happened rather than how sorry it is.

The date at the foot changes with it, and anything that widens what Canipus does with your data is told to you by email before it starts, not after.