Legal
Privacy Policy
Last updated
NMC Ad Guide (check.medvyn.in) is a MEDVYN service operated by NEXT LEVEL IDEAS COMMUNICATION, Ahmedabad (“we”, “us”). Doctors, hospitals and agencies use it to check advertising content, which is often unpublished and commercially sensitive — so we keep what you submit private to your account and use it only to produce your reports.
What we collect
- Account details — your name, email address and (optionally) profession. If you use a password, we store only a salted scrypt hash of it, never the password itself. If you sign in with Google, we receive your name, email address, profile picture and Google account ID.
- Contact details — your mobile number and city, which we ask for once, right after you sign up, and whether you've chosen to receive MEDVYN Jobs updates. See Mobile number, city and MEDVYN Jobs updates below.
- Content you check — the text you paste or the image you upload, the context you select (who is publishing, where, whether AI was used), a title derived from it, and the report we generate. Uploaded images are re-encoded on our server, which strips embedded metadata such as camera details and GPS location.
- Payment records — if you buy image checks: the plan, amount and currency, the payment's status and dates, the payment method type (for example UPI or card), and the order, payment and subscription IDs that Razorpay assigns. We never receive or store card numbers, CVVs, UPI IDs or PINs, or bank log-in details — you enter those on Razorpay's secure checkout. See Payments below.
- Security and abuse-prevention data — your IP address (recorded with each check and with sign-in, sign-up and password-reset attempts), your browser's user-agent for active sessions, and timestamps.
Please don't submit information that identifies patients. Blur faces and remove names, case numbers and similar details before uploading — the guidelines themselves restrict publishing them (clauses 6.1–6.4).
How we use it
- To run your checks, show your reports and keep your history.
- To take payments, add the image checks you buy to your account, renew or cancel a Monthly plan, handle refunds, and keep the accounting and tax records the law requires.
- To sign you in, keep your account secure, and send password-reset emails.
- To contact you about your account or a support request you've made.
- To prevent abuse and manage limits — for example, rate limits on sign-in attempts and the image checks on each account.
- To fix problems and improve the checker, using our own access to the stored data.
- Only if you opt in: to send you relevant job openings and updates from MEDVYN Jobs.
We do not sell your data, we do not use your content for advertising, and we never publish or share what you submit. We don't use advertising or third-party analytics cookies.
Mobile number, city and MEDVYN Jobs updates
After you create an account we ask for your mobile number and city before showing your first report. We use them to run your account and to reach you about it — for example, to answer a support request or a request for more image checks. They are never shown publicly and never sold or shared outside MEDVYN.
- MEDVYN Jobs updates are optional. The box “Send me relevant job openings and updates from MEDVYN Jobs” is unticked unless you tick it. If you do, MEDVYN may contact you by email, phone, SMS or WhatsApp about openings and updates on MEDVYN Jobs (jobs.medvyn.in), our job portal for healthcare professionals. Not ticking it changes nothing else about the service.
- Withdrawing consent: email support@medvyn.in from the address on your account and we'll stop. Withdrawing doesn't affect your account or your reports.
- Correcting them: email us from your account's address with the new number or city.
Who processes it for us
- Anthropic — when AI review is enabled, the text or image you submit, together with your selected context, is sent to Anthropic's Claude API to generate the analysis. Anthropic processes it as our service provider under its commercial API terms.
- Our hosting provider — the app and its database run on servers we rent, which store the data on our behalf.
- Our email provider — to deliver password-reset emails to your address.
- Google — only if you choose “Continue with Google”, under Google's own privacy policy.
- Razorpay (Razorpay Software Private Limited) — only if you buy image checks. Razorpay processes the payment as our payment gateway, under its own privacy policy and the card-network and RBI rules that apply to it.
When AI review is not enabled, checks run entirely on our own server, including reading text from images.
Payments
Payments are handled entirely by Razorpay. When you choose a plan, we create the order (or subscription) with Razorpay and open its checkout window with your name, email address and mobile number filled in, so you don't have to type them. Your card, UPI or bank details go straight to Razorpay and are never sent to, or stored on, our servers. Razorpay tells us the outcome — the order, payment and subscription IDs, amount, status and payment method type — which is what we keep, so we can show your payment history, credit your checks and handle refunds. For a Monthly plan, Razorpay stores the payment mandate needed to renew it.
Cookies
We use only cookies that are needed for the service to work. All are first-party and inaccessible to scripts.
| Cookie | Purpose | Lasts |
|---|---|---|
| nmcg_session | Keeps you signed in | 30 days |
| nmcg_draft | Links a check you started before signing in to your account once you sign in | 24 hours |
| nmcg_oauth | Protects the Google sign-in hand-off | 10 minutes |
When you open the payment window, Razorpay's checkout loads from checkout.razorpay.com and may set its own cookies there, under Razorpay's policy. We don't load it on any other page.
How long we keep it
- Your account, checks and reports: until you delete them or ask us to delete your account.
- Payment records: for as long as Indian tax and accounting laws require us to keep them — which can be longer than your account exists.
- Your mobile number, city and MEDVYN Jobs choice: for as long as your account exists — erased when the account is deleted. If you withdraw consent for MEDVYN Jobs updates, we keep only the fact that you did, so we don't contact you again.
- Sign-in sessions expire after 30 days; password-reset links after 1 hour.
- Records of sign-in and similar attempts used for rate limiting: about two days.
- Checks started without signing in and never claimed aren't linked to any account and may be deleted at any time.
Security
Traffic is encrypted with TLS. Passwords are hashed with scrypt, sessions use signed httpOnly cookies, and reports and images are served only to the account that created them. No system is perfectly secure, but we work to protect your data and will notify you as the law requires if a breach affects you.
Your rights
Under India's Digital Personal Data Protection Act, 2023 you can ask us to access, correct or erase your personal data, withdraw consent, and raise a grievance. Email support@medvyn.in from the address on your account and we'll respond within a reasonable time. Deleting your account removes your checks and reports (payment records we must keep by law are retained as described above). Postal address: NEXT LEVEL IDEAS COMMUNICATION, City Gold, 405, Sakar 9, Besides Ashram Rd, opp. Shiv Cinema, Ahmedabad, Gujarat 380009, India.
Children
NMC Ad Guide is a professional tool and is not meant for anyone under 18.
Changes
If we change this policy, we'll update this page and the date above; for significant changes we'll tell signed-in users. See also our Terms of Use.