Privacy Policy

Last updated: August 2026

1TapBook is a product of Asquarete, a partnership firm based in Hyderabad, India. Asquarete ("we", "us") provides appointment booking, payment links, and reminder software that clinics run on their own WhatsApp Business number. This policy explains what data passes through our systems and how we treat it. We have written it to be read, not skimmed past.

The roles, plainly

Each clinic is the owner of its patient relationships and patient data — in legal terms, the data fiduciary for its patients. We process data on the clinic's behalf to deliver bookings, payments status, and reminders. Patients' relationship is with their clinic; ours is with the clinic.

What we process

For patients of a clinic: WhatsApp phone number, name as given during booking, appointment details (doctor, date, token or time), payment status of the booking deposit, and — where a doctor enables it — prescriptions issued through the system.
For clinics: clinic and doctor names, schedules, contact details, and the connection credentials for the clinic's own WhatsApp and payment accounts.
Messages: booking-related WhatsApp messages are processed to run the service. We do not read or use them for anything else.

What we never do

We never sell data, to anyone.
We never advertise to patients or contact them beyond their clinic's bookings and reminders.
We never hold patient money — payments go directly from patient to clinic via the clinic's own payment provider.
We never show a patient other clinics or doctors. There is no marketplace here.

How data is protected

Clinic account credentials are encrypted at rest. Each clinic's data is isolated from every other clinic's. Access is limited to what is needed to operate and support the service. Booking messages travel over WhatsApp's own encrypted infrastructure and our servers speak to WhatsApp and payment providers over encrypted connections only.

Third parties involved

Two, both chosen by the clinic: Meta (WhatsApp) delivers the messages — the clinic holds its own WhatsApp Business account under Meta's terms; and the clinic's payment provider (for example Razorpay) processes deposits under its own terms. We send each only what is needed for its job.

Retention and deletion

Booking and prescription records are kept for as long as the clinic uses the service, because they are the clinic's records. When a clinic leaves, its data is deleted on request. A patient may ask their clinic to correct or delete their information, and we carry out the clinic's instruction.

Your rights (DPDP Act, 2023)

Patients in India have the right to access, correct, and request deletion of their personal data, and to raise grievances. The first stop is your clinic, whose patient you are; we support every such request the clinic passes to us. You can also contact us directly using the link below and we will route it with the clinic.

Contact

Questions, requests, or grievances: contact us. We reply within 7 days.