User Data Deletion Instructions & Runbook
Effective Date: October 1, 2026
Platform: Ceratics / Clinical OS (clinicalos.ceratics.com)
Compliance Standards: Meta Developer Policy § 4.b & DPDP Act 2023
Designated Officer: Swaraj Patil (privacy@ceratics.com)
If you have interacted with Ceratics or Clinical OS via our WhatsApp Business integration, patient portal, or clinic administration tools, you hold the statutory right to request the complete deletion of your personal data and Meta messaging identifiers.
Method 1: Self-Service Deletion for Clinics & Partners
Healthcare clinics utilizing the Meta WhatsApp Cloud API integration inside Clinical OS can revoke access and purge tokens instantly from the administrative dashboard:
- Log in to your Clinical OS workspace (e.g.,
{clinic}.clinicalos.ceratics.com). - Navigate to Settings > Integrations > WhatsApp.
- Click "Disconnect & Purge Access Tokens".
- Upon confirmation, the platform unsubscribes our application from the clinic's WhatsApp Business Account (via Meta's subscribed_apps endpoint), invokes Meta Graph API permission revocation to invalidate access tokens, and permanently purges stored access credentials and webhook configurations from active databases.
Technical Note: Disconnecting immediately invalidates all in-flight webhook deliveries from Meta servers. No further patient message logs will be processed or stored for your account.
Method 2: Data Principal / Patient Deletion Request
If you are a patient receiving appointment notifications, care instructions, or digital prescriptions via WhatsApp:
Email Instructions to the Statutory Grievance Cell
Send an email to privacy@ceratics.com with the subject line:
Please include the following details in your message:
- Full Legal Name: As registered with the clinic.
- Registered Indian Mobile Number: With +91 country code.
- Clinic Name: The healthcare practice you visited.
- Scope of Deletion: Confirmation whether you request deletion of WhatsApp messaging telemetry only, or complete demographic record erasure.
Execution Timeline, SLA & Verification
Step 1: 48-Hour Acknowledgment
Our Statutory Grievance Cell verifies your identity and issues an official tracking ticket and unique Deletion Reference ID within forty-eight (48) hours.
Step 2: 30-Day Permanent Deletion
Complete cryptographic purging of all cached tokens, WhatsApp message delivery receipts (wamid), and contact records across production databases is executed within 30 days.
In compliance with National Medical Commission regulations, Registered Medical Practitioners are legally required to preserve clinical procedural and prescription records for a minimum period of three (3) years. Where clinical health data is subject to mandatory preservation, personal messaging identifiers are decoupled, and clinical audit ledgers remain in encrypted, read-only cold storage solely for the statutory limitation period.
Compliance & Grievance Redressal
For questions regarding data erasure or if you require written confirmation of erasure:
Officer: Swaraj Patil (Founder & Chief Compliance Officer)
Email: privacy@ceratics.com | Phone: +91 9970527958
Address: Shop No. 11, Aaroha Dwelling, Dattanagar Chowk, Ambegaon Bk, Pune, Maharashtra 411046
Statutory Escalation: Data Protection Board of India (DPBI) at https://dpbi.gov.in