DigNep & MedX Privacy Policy

Welcome to MedX by Dignep. MedX is an Enterprise Resource Planning (ERP) and pharmacy management application developed and operated by Dig Nepal Technologies Pvt. Ltd. (Dignep). MedX is designed to help pharmacies, medical stores, healthcare businesses, and distributors manage sales, purchases, inventory, customers, suppliers, financial records, and other business operations. This Privacy Policy explains how we collect, use, store, protect, and manage information when you use the MedX mobile application, web application, and related services. By creating an account or using MedX, you acknowledge that you have read and understood this Privacy Policy.

MedX provides business-management and pharmacy-management services to registered firms and their authorized users. For questions regarding this Privacy Policy or your information, please contact us at dignepaltechnologies@gmail.com.

Depending on how you use MedX, we collect account credentials, authorized user role details, and unique Firm Code parameters to manage your business environment securely.

MedX allows authorized users to store, manage, and process comprehensive business records required for pharmacy ERP and health enterprise operations.

Businesses using MedX may enter information about their customers and suppliers. The business using MedX is responsible for ensuring it has an appropriate legal basis to process such information. MedX processes this data strictly to provide business-management services.

• ▪Customer & Supplier Name, Phone number, Address, and Email address
• ▪Account balance, Transaction history, Purchase/Sales records
• ▪Invoice history and payment logs

We automatically receive limited technical telemetry to operate, secure, troubleshoot, and optimize service performance.

• ▪Device type, Operating system, and Application version
• ▪Device configuration, IP address, Network information
• ▪Login timestamps, Error & diagnostic logs, Authentication sessions

MedX provides integrated barcode scanning features to streamline stock management and point-of-sale checkout.

• ▪Camera is accessed temporarily ONLY when the user explicitly activates barcode scanning.
• ▪Camera is used to identify products and streamline stock entry.
• ▪MedX DOES NOT continuously access or monitor your device camera.
• ▪Camera permissions are requested transparently via your operating system.

We strictly use collected information to deliver and maintain application functionality. We do not use business transaction data for unrelated purposes.

• ▪Create, authenticate, and manage user accounts and verify Firm Codes
• ▪Provide pharmacy ERP functionality, sales, purchase, and stock management
• ▪Generate invoices, financial reports, and maintain transaction logs
• ▪Maintain system security, detect unauthorized access, and troubleshoot bugs
• ▪Provide customer support and comply with applicable legal requirements

MedX uses a multi-tenant firm-based architecture to isolate business data between registered organizations. Each business is assigned a unique Firm Code. Upon login, user credentials and Firm Code are validated to route requests strictly against that business's environment. Users cannot access data outside their authorized firm.

Business and account records (including inventory, invoices, accounts, customer lists, and system logs) are stored on secure server infrastructure. We implement reasonable technical and organizational measures to safeguard stored data against unauthorized access, loss, or alteration.

We employ industry-standard security protocols. Users remain responsible for keeping login credentials confidential and notifying us immediately of suspected unauthorized account access.

• ▪Secure authentication and salted password hashing
• ▪Role-Based Access Controls (RBAC) and permission scoping
• ▪HTTPS / TLS encrypted transit for all client-server communications
• ▪Database access control, automated backups, and security monitoring

We DO NOT sell personal or business data to third parties. Information may only be disclosed when reasonably necessary to: provide MedX services via authorized infrastructure providers, protect system security/prevent fraud, comply with applicable laws or court orders, or facilitate corporate restructurings/mergers.

MedX may utilize trusted third-party infrastructure (e.g. cloud hosting, analytics, push notifications, authentication) necessary for service delivery. Such providers process data under binding privacy obligations and are prohibited from using MedX business data for independent purposes.

We may contact you with service-critical communications, including account verification, security alerts, password recovery, billing updates, and technical maintenance announcements.

We retain account and transaction records for as long as necessary to provide MedX services, maintain business transaction records, fulfill legal/statutory accounting requirements, and resolve disputes. Inactive or deleted accounts are disposed of securely according to data retention schedules.

Users may request deletion of their MedX account or personal data by emailing dignepaltechnologies@gmail.com with their Name, Registered Email/Phone, Firm Code, and deletion details. After identity verification, eligible accounts will be deleted, subject to legal or tax record retention requirements.

For business subscriptions, the Firm Administrator or business owner manages user access, role assignments, and permission controls. Requests from individual employee accounts may require authorization or routing through your firm's administrator.

MedX is an enterprise business and pharmacy management tool not intended for children. We do not knowingly collect personal data from minors. If you believe a child has submitted personal details, please contact us for prompt removal.

Businesses are responsible for ensuring their usage of MedX complies with local statutory healthcare, pharmacy, and data regulations.

• ▪Providing accurate business and user credentials
• ▪Maintaining confidentiality of passwords and authentication tokens
• ▪Ensuring customer and supplier data entered into MedX is collected lawfully
• ▪Restricting unauthorized employee access within your firm environment

We may periodically update this Privacy Policy to reflect app enhancements, regulatory updates, or technological changes. Material updates will be indicated by the 'Last Updated' date at the top of the policy.

For privacy questions, access, correction, or data deletion requests, reach out directly to our dedicated privacy support team.

By creating an account or using the MedX mobile or web application, you acknowledge that you have read, understood, and agreed to the data practices described in this Privacy Policy.

We collect information that you provide directly to us, such as when you fill out a contact form or subscribe to our newsletter. This may include your name, email address, and phone number.

We use the information we collect to provide, maintain, and improve our services, to communicate with you about projects and inquiries, and to send you updates.

Our website uses cookies to enhance your browsing experience and analyze site traffic. You can choose to disable cookies through your browser settings if preferred.

We take reasonable measures to protect your personal information from unauthorized access. However, no internet transmission is ever fully secure.

Our site may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites and recommend reading their policies.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated 'Last updated' date for transparency.

If you have any questions about this Privacy Policy, please contact our data team at dignepaltechnologies@gmail.com.