Privacy Policy

Welcome to DocLogbook (“the App” or “Platform”), operated by DOCLOGBOOK PRIVATE LIMITED (“we”, “us”, or “our”). DocLogbook is a dedicated clinical practice management, surgical case tracking, and professional CV management platform built specifically for medical doctors, surgeons, post-graduate (PG) medical residents, fellows, and healthcare trainees worldwide. We are committed to maintaining the highest standards of data security, confidentiality, and global regulatory compliance.

a. Information You Provide Directly

• Account Credentials: Full name, verified professional email address, and cryptographically hashed passwords.
• Medical Profile & Qualifications: Degrees, medical council registrations, institutional affiliations, certifications, and specialty categories.
• Clinical Logbook Entries: Surgical case numbers, procedure names, operative roles (Primary / Assisted / Supervised), OPD/IPD consultations, and diagnostic logs.
• Practice Financials: Consultation charges billed, payments received, and pending dues across affiliated healthcare centers.
• Uploaded Documents: Educational certificates, medical council documents, and clinical attachments stored in private encrypted storage.

b. Information Collected Automatically

• Device and operating system specifications for session security.
• Aggregated, anonymized performance metrics and diagnostic error logs.

• To provide, maintain, and synchronize your surgical logbooks and clinical portfolios across devices.
• To generate verified, one-click exportable CV and portfolio documents for credentialing, appraisals, and medical council audits.
• To authenticate and protect doctor accounts via time-limited One-Time Passwords (OTP) and session tokens.
• To provide internal clinical analytics, case-mix statistics, and multi-hospital practice fee tracking.

• Data in Transit: 100% of network communications enforce modern TLS 1.2 / TLS 1.3 transport encryption.
• Data at Rest: Stored using industry-standard AES-256 encryption across AWS storage volumes and S3 private document buckets.
• Ephemeral Access URLs: Uploaded medical documents and certificates are never public and are accessible solely through temporary, cryptographically signed URLs with a strict 15-minute expiration window.
• Tenant & Query Isolation: Strict row-level authorization middleware ensures no clinician can ever access or query another doctor's records.
• Credential Hashing: Passwords are irreversibly hashed using bcryptjs with high salt work factors.

We retain your profile data and clinical logbooks only for as long as your account remains active or as required for your ongoing career documentation. Upon an explicit account deletion request, your personal data and uploaded attachments are permanently purged from our primary databases and cloud storage.