Tech Potentia Privacy Policy
Governing techpotentia.com, HomeoNote™ Intelligent Clinical Suite, Client Platforms & Associated APIs
1Introduction & Fiduciary Identity
Tech Potentia ("Tech Potentia", "we", "our", or "us") is a modern technology enterprise headquartered in Mumbai, Maharashtra, India. We specialize in intelligent healthtech EdTech architectures, clinical learning platforms, and custom digital engineering. We develop and operate high-trust digital solutions, including our flagship educational and clinical companion, HomeoNote™.
Under the Digital Personal Data Protection Act, 2023 (DPDP Act) of India and applicable international data privacy standards, Tech Potentia acts as the Data Fiduciary (or Data Controller) in respect of personal data collected through:
- Our primary corporate portal at techpotentia.com and all related subdomains;
- The HomeoNote™ web application, mobile applications, early preview cohorts, and clinical learning companions;
- Our custom software engineering, AI automation, and cloud consulting portals and APIs;
- Direct waitlists, consultation forms, quotation wizards, and communication channels.
Where Tech Potentia is engaged by an institutional healthcare client or enterprise to process end-user personal data strictly on their behalf, Tech Potentia operates as a Data Processor governed by a dedicated Data Processing Addendum (DPA).
2Definitions
Personal Data
Any data about an individual who is identifiable by or in relation to such data, whether directly or indirectly.
Processing
A wholly or partly automated operation or set of operations performed on personal data, including collection, recording, structuring, storage, retrieval, use, disclosure, or erasure.
Data Principal
The individual to whom the personal data relates. Where the individual is a child (under 18 years) or a person with disability, includes parents or lawful guardians.
Data Fiduciary
Any person who alone or in conjunction with other persons determines the purpose and means of processing personal data (Tech Potentia).
User
Any individual browsing our websites, registering for waitlists, testing beta features, or creating personal or professional accounts.
Client
An enterprise, institution, clinic, or individual engaging Tech Potentia for professional development, systems architecture, or custom engineering services.
HomeoNote™
Our proprietary intelligent study companion and clinical learning software suite for homeopathy students, interns, doctors, and academic institutions.
Service Provider / Processor
A vetted third-party entity engaged by Tech Potentia to process data strictly on our behalf (e.g., cloud infrastructure, database hosting, transactional email relays).
3Scope of Policy
This Privacy Policy applies to all individuals whose personal data is processed by Tech Potentia across any of our digital surfaces:
Internal Workforce Demarcation: Personal data relating to Tech Potentia employees, interns, and direct contractors is governed by our internal Workplace & Information Security Policy, which is provided separately during personnel onboarding.
4Personal Data We Collect
Depending on your interaction with our platform, products, and services, we collect and process the following specific categories of personal data:
badgeIdentity Data
Full legal name, username, professional prefix (Dr., Prof., Student), and display handle.
mailContact Data
Personal or institutional email address, telephone/mobile contact number, and professional mailing address.
schoolProfessional & Academic Data
College or university affiliation, enrolled or conferred medical degree (e.g., BHMS, MD Homeopathy), role (student, intern, practitioner, clinic director), and graduation cohort.
business_centerClient & Quotation Data
Company name, service requested (Web Dev, App Dev, System Management, Automation, Agentic AI, Digital Marketing), estimated budget range ($15k - $35k, etc.), and project requirements.
lockAccount & Authentication Metadata
Internal unique user ID, salted and hashed passwords, login tokens, session timestamps, and security settings.
devicesTechnical & Telemetry Data
IP address, browser type and version, device model, operating system, network diagnostics, and access logs.
credit_cardPayment & Billing Data (Razorpay & Direct Invoicing)
We collect business billing addresses, GSTIN numbers, and invoice transaction histories. Digital subscriptions are processed securely via Razorpay (compliant with RBI guidelines, DPDP Act 2023, and PCI-DSS Level 1). For bespoke client software development, billing is fulfilled via formal milestone invoices and direct bank wire transfers.Card Data Protection: Tech Potentia NEVER stores, views, or retains credit card numbers, debit card numbers, CVVs, or online banking credentials on our servers.
5HomeoNote™ Clinical & Academic Data
HomeoNote™ is engineered as an intelligent study companion and clinical decision-support scribing utility. Our production infrastructure only processes data categories essential to deliver requested educational and clinical workflow capabilities:
Academic Notes & Repertory Lookups
Remedy comparisons, rubric cross-indexing, Materia Medica keynote bookmarks, study flashcard progress, and BHMS exam prep annotations.
Voice-to-Case Clinical Transcription Audio
Where a physician or intern activates voice clinical scribing, audio streams are ingested strictly for immediate, transient acoustic transcription to convert spoken symptoms into structured repertory rubrics. Raw audio recordings are ephemeral and deleted after transcript generation unless explicitly saved by the user.
De-Identified Clinical Case Simulations
Synthetic, anonymized, or volunteer clinical cases utilized for student training and diagnostic practice without exposing real patient identifiers.
Physician Obligation on Patient Privacy
Practicing homeopathic doctors using HomeoNote™ in real-world clinical consultations remain the primary custodian of patient medical records. Physicians must ensure informed patient consent before using ambient clinical transcription and avoid transmitting direct personal identifiers (e.g., patient Aadhaar, passport, or full address) into study notes.
6How We Obtain Information
We obtain personal data through the following transparent touchpoints:
- Directly from you: Through website form submissions (student waitlist, quote calculator, and contact requests), account registration, questionnaire responses, email communications, and support queries.
- During product usage: Features invoked within the HomeoNote™ suite, saved repertory rubrics, Materia Medica notes, study logs, and platform interactions.
- Automated technologies: Session cookies, telemetry scripts, server logs, and diagnostic monitors that measure platform responsiveness and system stability.
- Third-party integrations: Where you elect to sign in using authorized federated identity providers (such as Google OAuth or institutional Single Sign-On).
7Why We Process Data (DPDP Notice Table)
In compliance with the DPDP Act, 2023 and international notice standards, the following table details each personal data category, specified purpose, lawful ground, and statutory retention schedule:
| Data Category | Specified Purpose of Processing | Lawful Basis (DPDP / GDPR) | Retention Window |
|---|---|---|---|
| Account & Identity Data | User authentication, profile management, role verification, and access controls. | Performance of Contract / User-Requested Services (DPDP Act Sec. 6(1)) | Duration of active account + 180 days following account closure |
| Contact Data | Service notices, waitlist priority invitations, customer support replies, and security alerts. | Legitimate Uses / Performance of Contract | Duration of engagement or until unsubscription/erasure request |
| Project & Consultation Data | Architectural evaluation, scope analysis, quotation generation, and contractual proposals. | Pre-contractual steps taken at the request of the prospective client | 3 years for commercial records and tax audit compliance |
| Usage & Interaction Data | Product diagnostics, feature adoption analysis, UX optimization, and capacity planning. | Legitimate business improvement / Aggregated telemetry | Rolling 14 months in aggregated/de-identified form |
| Technical Logs & Telemetry | Detecting security anomalies, DDoS mitigation, intrusion prevention, and system health monitoring. | Legal obligation (CERT-In IT Security Rules 2022) & System Security | 180 days in raw format as prescribed by Indian statutory cybersecurity regulations |
| HomeoNote™ Clinical & Study Data | Delivering requested study companion features: rubric lookups, Materia Medica notes, and voice scribing transcription. | Explicit consent of student / doctor for requested functionality | Maintained during active subscription; user-deletable at any time |
| Payment & Billing Metadata | Invoicing, statutory tax accounting (GST), receipt generation, and financial reconciliation. | Compliance with statutory legal tax obligations & contract fulfillment | 8 years as mandated by Indian statutory tax legislation |
| Waitlist & Communications | Early cohort rollout invitations, release notes, and educational updates. | Consent provided via form submission (with 1-click unsubscribe) | Until unsubscription or erasure request received |
8Consent and Other Applicable Grounds
Under Section 6 and Section 7 of the DPDP Act 2023, Tech Potentia processes personal data strictly under lawful grounds:
- Consent: Where you explicitly opt-in by submitting forms (such as waitlist registration or marketing updates). Consent is informed, specific, unbundled, and accompanied by this notice.
- Withdrawal of Consent: You retain the absolute statutory right to withdraw consent at any time as easily as giving it, by emailing
[email protected]or using our one-click Unsubscribe Tool. - User-Requested Services & Contracts: Processing necessary to fulfill services you explicitly requested, such as delivering the HomeoNote™ software, preparing software architecture scopes, or executing a Statement of Work.
- Compliance with Legal Obligations: Processing required under statutory legislation, including tax compliance (GST), cybersecurity incident reporting under CERT-In directions, and court orders.
9Artificial Intelligence (AI) Processing & Model Governance
Tech Potentia deploys advanced machine learning and Agentic AI technologies across HomeoNote™ and client engineering solutions. We enforce strict transparency regarding our AI pipelines:
Which Features Use AI?
HomeoNote™ repertory semantic search, voice-to-rubric clinical scribing, comparative Materia Medica summaries, and autonomous development workflow agents.
Third-Party AI APIs
We utilize enterprise AI APIs (such as Google Cloud Vertex AI and OpenAI Enterprise) governed by zero-retention enterprise agreements.
Zero Model Training on User Data
Neither Tech Potentia nor our foundation AI API providers use your personal data, clinical study notes, or proprietary client source code to train public machine learning models.
Human Oversight & Verification
AI outputs are assistive tools. In HomeoNote™, AI does not make autonomous clinical determinations. Healthcare professionals must independently review all repertory suggestions.
For complete AI governance standards, consult our dedicated AI Transparency & Usage Policy.
10Sharing Personal Data & Categories of Recipients
Tech Potentia does not sell, rent, or trade your personal data. We disclose personal data only to vetted categories of recipients under strict confidentiality:
11Subprocessor Governance
We maintain a publicly accessible, transparent inventory of all third-party vendors and subprocessors authorized to process data on our behalf. Subprocessors are subjected to comprehensive security assessments before onboarding.
Official Subprocessor Directory
Review provider names, purposes, processing regions, and certifications.
12International & Cross-Border Data Transfers
Tech Potentia operates globally distributed cloud infrastructure. While primary databases and processing occur in secure cloud regions, certain services (such as global CDN edge nodes or cloud APIs) may involve cross-border transfers.
All cross-border transfers are executed in strict accordance with Section 16 of the DPDP Act 2023, complying with Central Government territory notifications and ensuring contractually equivalent safeguards.
13Data Retention Schedules & Criteria
14Security Safeguards & Architecture
Tech Potentia deploys layered defenses adhering to ISO/IEC 27001 principles to preserve confidentiality, integrity, and availability:
TLS 1.3 in Transit
All communications between your browser, apps, and APIs are shielded via modern TLS 1.3 cryptographic protocols.
AES-256 at Rest
Databases, object stores, and database snapshots are encrypted at rest using industry-standard AES-256 algorithms.
Least Privilege (RBAC)
Access to production clusters requires hardware MFA, role-based authorization, and continuous audit logging.
Review our complete security posture on our dedicated Security & Responsible Disclosure page.
15Data Breach Response Protocol
In compliance with Section 8(6) of the DPDP Act 2023 and CERT-In directions, Tech Potentia maintains a rigorous 5-stage Security Incident Protocol:
In the event of a verified personal data breach, Tech Potentia will notify the Data Protection Board of India and affected Data Principals in the prescribed form and manner without undue delay.
16Data Principal Rights (DPDP Act 2023)
As a Data Principal under the DPDP Act 2023, you enjoy enforceable statutory rights regarding your personal data:
Right to Access Information
Obtain a summary of personal data being processed, processing activities completed, and identities of Data Fiduciaries/Processors with whom data has been shared.
Right to Correction & Updating
Request correction of inaccurate or misleading personal data, completion of incomplete records, and updating of profile details.
Right to Erasure
Request erasure of personal data that is no longer necessary for the specified purpose for which it was collected.
Right of Grievance Redressal
Readily accessible grievance redressal provided by Tech Potentia before escalating unresolved disputes to the Data Protection Board of India.
Right to Nominate
Nominate any other individual to exercise your rights under the DPDP Act in the event of death or incapacity.
To exercise any of these statutory rights, email [email protected]. Statutory requests are verified and resolved within 30 days without fees.
17Children's & Minor Student Privacy
HomeoNote™ is tailored for professional homeopathy students (BHMS, MD), interns, and licensed practitioners. In accordance with Section 9 of the DPDP Act 2023:
- We do not knowingly process personal data of individuals under the age of 18 without verifiable parental or lawful guardian consent.
- We do not engage in targeted behavioral advertising directed at minors or tracking/monitoring that causes any detrimental effect on children's well-being.
18Cookies & Local Storage Preferences
We use strictly necessary cookies, session tokens, and performance telemetry to deliver secure authentication and monitor web vitals. For an itemized breakdown of cookies and browser control settings, visit our Cookie Policy.
19Third-Party Websites & Integrations
Our websites and platforms may link to third-party services, academic databases, or clinical repositories. Tech Potentia is not responsible for the privacy practices or content of third-party platforms. We encourage you to review their individual privacy notices.
20Policy Updates & Notifications
We review and update this Privacy Policy periodically to reflect technological advancements, product evolutions, and statutory rulemaking under the DPDP Act. Material changes will be highlighted via in-app banners or email notification prior to taking effect.
21Statutory Grievance Redressal Mechanism
In compliance with the DPDP Act 2023 and the Information Technology Rules 2021, our designated Grievance Officer details are:
Office of the Grievance Officer
Tech Potentia
Location: Mumbai, Maharashtra, India
Email: [email protected] (Corporate Escalations: [email protected])
Acknowledgement SLA: Within 24–48 working hours.
Statutory Resolution SLA: Within thirty (30) days from formal ticket receipt.
Appeals: Under the DPDP Act 2023, if your grievance remains unresolved within the statutory timeline, you retain the legal right to file an appeal before the Data Protection Board of India.