LEGAL

Last updated: 15/9/2026

This Privacy Policy explains how WEBMAGIC LAB, trading as NQUIRI ("nquiri", "we", "us"), handles personal data on nquiri.com and in every nquiri product on a nquiri.com subdomain, including nquiri for dental clinics at dental.nquiri.com (the "Service").

We follow India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology Act, 2000 with its rules on sensitive personal data.

Anything that is true of one nquiri product only is set out in section 12.

ON THIS PAGE

1Two kinds of data, two roles2What we collect3How we use it4Legal basis5Who we share it with6Where your data is stored7How we protect it8How long we keep it9Your rights10Cookies11Children12Product-specific notes13Changes to this policy14Grievance Officer and contact

a) Data about our customers. This covers the owners, staff and professionals at the businesses that use nquiri, and visitors to our website. We decide how this data is used, so for it we are the Data Fiduciary.

b) Data our customers keep in nquiri. This covers the records a business keeps about its own customers — for a dental clinic, its patients and their appointments, treatments, clinical notes and payments ("Customer Data"). The business decides what to record and why, so the business is the Data Fiduciary and we are its Data Processor. We handle Customer Data only on that business's instructions and to run the Service.

If a business uses nquiri to keep records about you — if you are a patient of a dental clinic that uses it, for example — and you want to see, correct or delete your information, please contact that business directly. If you contact us instead, we will pass your request on to them.

WHEN YOU SIGN UP AND USE NQUIRI

• •name, email address, phone number, and business name and address;
• •login details (your password is stored only as a secure one-way hash, which even we cannot read);
• •your role and settings, and a record of important account actions;
• •technical data such as IP address, browser type, and login times, used for security.

WHEN YOU BUY A SUBSCRIPTION

• •order details, billing name and address, and GSTIN if you give one;
• •card, UPI and bank details go directly to our payment partner. We never see or store them.

WHEN YOU CONTACT US

Whatever you choose to share by email, phone or WhatsApp.

CUSTOMER DATA, HELD FOR THE BUSINESS THAT OWNS IT (SEE SECTION 1B)

The records you keep about your own customers: their names, contact details and dates of birth, their appointments, the work you have quoted and carried out, your notes against them, and their invoices and payments. What this covers in practice depends on the product — section 12 sets out what each one records.

Where a product records health information, that is sensitive personal data, and we protect it as such.

We use data about our customers to:

• •create and run your account, and verify your email;
• •provide, maintain, secure and improve the Service;
• •process subscriptions, send invoices and renewal reminders;
• •answer support requests;
• •send service notices, such as security alerts or changes to these policies;
• •send product news, only if you agree. You can opt out at any time;
• •meet legal, tax and accounting obligations.

We use Customer Data only to provide the Service to the business that owns it. That includes storing it, showing it to that business's authorised users, creating its reports and exports, backing it up and keeping it secure. Customer Data from one product is never combined with Customer Data from another, and never with another business's.

We never sell personal data. We never use Customer Data for advertising. 

We process your data on the basis of your consent, to perform our contract with you, and for legitimate uses allowed under Section 7 of the DPDP Act, such as complying with law. Each business is responsible for its own lawful basis, including any consent it needs from its customers, for the Customer Data it enters.

We share data only with service providers we need to run the Service. Each is bound to protect it:

We may also disclose data if the law, a court or a government authority requires it, or to protect the rights and safety of our users. If our business is transferred, your data goes with it under the same protections, and we will tell you first.

WhatsApp messages. When the Service prepares a WhatsApp message, it opens WhatsApp on your own device and you send it. WhatsApp's own privacy terms apply to that message. If we offer an automated messaging module, its data handling will be explained before you turn it on.

Customer Data and account data are stored on servers in India. Some providers listed above, such as our email provider, may process limited contact data outside India, as the DPDP Act allows. No system is perfectly secure. If a personal data breach occurs, we will notify the affected businesses without undue delay.

• •Account and Customer Data: for as long as your account exists. If your subscription lapses, we do not delete your data for 2 months, so you can return or export it within those 2 months
• •After a deletion request: the owner can ask us through email to permanently delete the account. We delete it from live systems, and it disappears from backups as they expire on their normal cycle.
• •Individual customers: a business can erase one of its customers' identifying details inside the app. Records that business is required by law to keep — a dental clinic's clinical records, for example — are retained.
• •Billing records: kept for as long as tax and accounting law requires (generally 8 years).
• •Security logs: kept for a limited period, then deleted.

Under the DPDP Act, you have the right to:

• •access a summary of the personal data we hold about you and how it is used;
• •correct, complete or update it;
• •erase it, where we are not legally required to keep it;
• •withdraw consent at any time (this does not affect processing that already happened);
• •nominate another person to exercise your rights if you die or become incapacitated;
• •raise a grievance with us.

To use these rights, write to legal@nquiri.com. We may need to verify your identity. We aim to respond within 30 days. If your data is held by a business that uses nquiri rather than by us, contact that business first (see section 1).

Our apps use one essential session cookie to keep you logged in. It holds no personal details. It is required for the Service to work.

nquiri.com uses analytics cookies like Google Analytics to understand how visitors use the website.

Our apps save only design files such as icons and styles on your device, so they load faster. Your customers' data is never stored in the browser cache.

The Service is for businesses and is not meant for children. A business using nquiri may record information about someone under 18 — a dental clinic treating a child patient, for example. That business is responsible for getting consent from a parent or guardian as the law requires.

Everything above applies to every nquiri product. This section sets out what is true of one product only.

12.1nquiri for dental clinicsdental.nquiri.comWhat Customer Data covers here. Patient names, phone numbers and dates of birth, appointments, treatment plans, dental charts, clinical and medical history, prescriptions, consent records, lab work, invoices and payments.Patients should contact their clinic. The clinic, not nquiri, decides what is recorded about a patient and why. A patient asking to see, correct or delete their records should ask the clinic. If they write to us, we pass the request on.Clinical records are retained. A clinic can erase a patient's identifying details in the app, but records the clinic is required by law to keep stay in place.

As each further nquiri product launches, what it records will be added here as a new subsection.

We may update this policy. We will post the new version here with a new "Last updated" date, and we will notify account owners of material changes by email or in the product before they take effect.

In line with the DPDP Act and the Information Technology Act, 2000, our contact to Grievance Officer is:

legal@nquiri.com

We acknowledge grievances within 48 hours and resolve them within 30 days.