Privacy & Cookie Policy
Last updated: 13 October 2026
This policy explains what information MediInventory collects, why, and how it is protected. It should be read together with our Terms & Conditions.
1. What we collect
- Account details: business name, branch, state, GSTIN (optional), your name, email address and mobile number, and those of staff you add.
- Business records you enter: medicines, stock and batches, suppliers, purchases, sales, invoices, returns, rack locations, photos and customer or patient names on bills.
- Security information: sign-in times, the devices used to sign in (a random device ID and browser name) and an activity log of changes.
- Payment information: plan, amount, date and payment reference. Card, UPI and bank details are handled by Razorpay; we never see or store them.
2. Why we use it
- To run the service you signed up for: billing, stock, reports and staff access.
- To keep accounts secure, enforce device and staff limits and show you the activity log.
- To send essential emails: account activation, password reset, staff invitations and payment confirmations.
- To process subscription payments and provide support when you ask for it.
We do not sell your data, use it for advertising, or share it with other pharmacies.
3. How your data is protected
- Each pharmacy's records are isolated. The database itself refuses to return another shop's data, and this is tested automatically with many shops working at once.
- Passwords are stored only as one-way hashes. Password-reset links expire and work once.
- Our admin tools show only billing information (shop name, owner email, plan and payment status). They have no screens for your medicines, sales, stock or patients.
- Our servers are managed by the MediInventory team and hosted in India. Access is limited to authorised people, only to keep the service running or when you ask for help.
4. Who else processes data
- Razorpay for online payments.
- Our email provider to deliver account and payment emails.
- Our hosting provider to run the servers and database.
5. How long we keep data
Your records are kept while your account exists, including after a plan ends, so you do not lose your history. Sign-in devices unused for 30 days are removed automatically. To close your account and delete your data, contact us.
6. Your choices and rights
- View and update your name and mobile number from the profile menu; change your password at any time.
- The owner can add, restrict or remove staff and devices.
- You can ask us for a copy of your data or for its deletion, subject to records the law requires you to keep.
7. Cookies and browser storage
MediInventory uses only what is needed for the app to work. We do not use advertising or tracking cookies.
| What | Why | Type |
|---|---|---|
| Sign-in session | Keeps you signed in and remembers which business and branch you selected. | Essential |
| Device ID | Identifies this browser for the device limit and lets the owner remove old devices. | Essential |
| Theme | Remembers light or dark mode. | Preference |
| Cookie choice | Remembers that you have seen this notice. | Essential |
| Razorpay checkout | Set by Razorpay only while you make a payment, for fraud prevention. | Third party, essential |
These are stored in your browser and cleared when you sign out or clear your browser data. Blocking them will stop sign-in from working.
8. Changes
We will update this page when our practices change. The date at the top shows the latest version.
9. Contact
For privacy questions or requests, use the contact options on our home page.