Privacy Policy

Guru Brothers Ltd ("we", "our", or "us") operates DawaCloud (also known as Drugs Empior), a global pharmaceutical management and marketplace platform ("Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service — whether as a business subscriber, a wholesale distributor, or a public/patient account holder. Please read this policy carefully.

1. Information We Collect

We collect information in the following ways:

• Account Information: Name, email address, phone number, and business or personal details when you register.
• Business Data: Drug inventory, sales transactions, procurement records, employee information, and financial data you enter into the platform (business accounts).
• Community & Marketplace Data: Posts, comments, likes, follows, pharmacy ratings, online order details, and delivery addresses submitted by public/patient accounts.
• Usage Data: Log files, IP addresses, browser type, device identifiers, pages visited, and time spent on the Service.
• Device Data: Mobile device type, operating system, and unique device identifiers when using our mobile application.
• Payment Information: Billing details processed securely via Stripe. We do not store full payment card numbers.
• Communication Data: Messages you send us via email, support channels, or the in-platform partner messaging feature.
• Advertising Data: Campaign impressions and click events (IP addresses are hashed and not used to identify individuals).

2. How We Use Your Information

We use collected information to:

• Provide, operate, and maintain the DawaCloud Service
• Process transactions and send related billing notifications
• Send administrative communications, including account confirmations and updates
• Respond to support requests and troubleshoot issues
• Analyse usage patterns to improve platform features and user experience
• Detect and prevent fraudulent or unauthorized use
• Comply with applicable legal obligations
• Send marketing communications (with your consent — you may opt out at any time)

3. AI Chat Feature

DawaCloud includes an AI-powered chat assistant powered by Anthropic's Claude API. When you use this feature, your questions and relevant business data summaries (inventory levels, sales trends, expiry alerts) are transmitted to Anthropic's API for processing. We do not send personally identifiable patient data to AI services. Anthropic's use of API data is governed by Anthropic's Privacy Policy. You may disable the AI chat feature in Settings → AI Chat.

4. Data Sharing and Disclosure

We do not sell your data. We may share information with:

• Service Providers: Trusted third parties who assist us in operating the Service (Stripe for payments, MailKit/Twilio for communications, Microsoft Azure for hosting). These providers are bound by confidentiality obligations.
• Anthropic: For AI chat feature processing (see Section 3).
• Legal Requirements: If required by law, court order, or governmental authority.
• Business Transfers: In connection with any merger, sale, or acquisition of our business assets.

5. Data Storage and Security

Your data is stored on secure servers hosted in compliance with industry standards. We implement appropriate technical and organisational measures including:

• TLS 1.2+ encryption for all data in transit
• AES-256 encryption for data at rest
• Role-based access controls and multi-factor authentication options
• Regular security audits and vulnerability assessments
• Secure backup procedures with geographic redundancy

No method of electronic transmission or storage is 100% secure. While we use commercially acceptable means to protect your data, we cannot guarantee absolute security.

6. Offline Data (Mobile App)

The DawaCloud mobile app stores a subset of your business data locally on your device using SQLite for offline functionality. This local data is protected by your device's security mechanisms. When connectivity is available, data synchronises with our secure servers. We recommend enabling device encryption and using a strong PIN or biometric lock.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time by contacting us at privacy@dawacloud.com. Some data may be retained for legal or audit purposes for up to 7 years.

8. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Portability: Request your data in a machine-readable format.
• Objection: Object to processing of your personal data for marketing purposes.
• Restriction: Request restriction of processing in certain circumstances.

To exercise any of these rights, contact us at privacy@dawacloud.com. We will respond within 30 days.

9. Cookies

The DawaCloud web application uses cookies to maintain your authenticated session and remember your preferences (such as theme and language). We use:

• Essential cookies: Required for authentication and session management. Cannot be disabled.
• Preference cookies: Store your theme, language, and display settings.

We do not use third-party advertising or tracking cookies.

10. Children's Privacy

DawaCloud is a business-to-business Service not directed to children under 18. We do not knowingly collect personal information from children. If you believe we have collected data from a minor, please contact us immediately.

11. International Data Transfers

DawaCloud is a globally available platform. Your information may be transferred to and processed in countries other than your country of residence — including the country where our servers are hosted. We ensure appropriate safeguards are in place for all such transfers, including standard contractual clauses, data processing agreements, and equivalent protection measures as required by applicable data protection law in your jurisdiction.

12. Marketplace & Patient Data

When you place an online order through the Drugs Empior marketplace, your delivery address and order details are shared with the fulfilling pharmacy solely for order processing. We do not sell patient order data. Pharmacy ratings and public posts are visible to other platform users as intended by their public nature.

Prescription images uploaded for Rx drug orders are stored securely and accessible only to the dispensing pharmacy and, where required, regulatory authorities. We do not process prescription images with AI or share them with any third party beyond the fulfilling pharmacy.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice in the Service at least 30 days before changes take effect. Your continued use of the Service after changes constitutes acceptance of the updated policy.

15. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

• Email: privacy@dawacloud.com
• General: info@dawacloud.com
• Company: Guru Brothers Ltd — info@dawacloud.com