How Rxcript Health collects, uses, shares, and protects your information.
Last updated: 30 June 2026
This Privacy Policy explains how Rxcript Health ("Rxcript", "we", "us") handles information in connection with our prescription and clinical-records platform at app.rxcript.com and our website at rxcript.com (together, the "Service"). By using the Service you agree to this Policy.
Rxcript is an India-native clinical prescribing tool used by doctors and clinics to write prescriptions, manage encounters, and securely deliver prescriptions to patients. For clinical records that doctors create about their patients, the treating doctor or clinic is the data controller and Rxcript acts as a processor on their behalf.
We do not sell personal information, and we have no pharmaceutical-company partnerships that involve sharing your data for marketing.
We process information to perform our contract with you, to pursue our legitimate interests in operating and securing the Service, with your consent where required, and to comply with applicable law (including the Digital Personal Data Protection Act, 2023 in India).
When a doctor chooses to send a prescription to a patient over WhatsApp, we use the WhatsApp Business Platform provided by Meta. To do this we share the patient's phone number and a message containing a secure link to the prescription with Meta for the sole purpose of delivering that message. Meta processes this data in accordance with its own terms and privacy policy. We record the delivery status of each message (for example, sent, delivered, read, or failed) so the doctor knows whether the prescription reached the patient. We do not receive the patient's WhatsApp profile information.
Meta's handling of messaging data is described in the WhatsApp Business Messaging Policy and the Meta Privacy Policy.
We share information only with service providers that help us run the Service, under appropriate confidentiality and data-protection obligations:
We may also disclose information where required by law, to protect rights and safety, or as part of a corporate transaction, subject to this Policy.
We use industry-standard safeguards including encryption in transit, access controls, row-level security to isolate each user's data, and least-privilege access for staff. No system is perfectly secure, but we work to protect your information and to limit access to only what is necessary.
We retain account and clinical records for as long as needed to provide the Service and to meet medical-record retention and legal obligations. You may request deletion as described in Section 10.
Subject to applicable law, you may request access to, correction of, or deletion of your personal information, and you may object to or restrict certain processing. To exercise these rights, contact us using the details below. Patients whose records were created by a doctor or clinic may need to direct certain requests to that clinician, who controls those records.
You can request deletion of your account and associated personal data at any time. See our Data Deletion Instructions for how to do this and what is removed.
The Service is intended for use by licensed clinicians and their adult patients, or by guardians acting on a patient's behalf. We do not knowingly create accounts for children directly.
Rxcript is operated for use in India. If you access the Service from elsewhere, you consent to processing as described in this Policy.
We may update this Policy from time to time. We will revise the "Last updated" date above and, where appropriate, provide additional notice.
Questions or requests: hello@rxcript.com or support@rxcript.com.