Last updated: 15 October 2026
This policy explains how Javita Consultancy Private Limited (“Javita”, “we”, “us”) handles personal data for Tejoya, our AI front-desk service for clinics, and for this website, tejoya.com. We follow India’s Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025.
1. Who we are
Javita Consultancy Private Limited, Plot No 77, K G N Colony, Ameenapur, Hyderabad, Rangareddy, Telangana 502032, India. CIN U72900TG2022PTC161798. Email privacy@tejoya.com.
2. Our two roles
- For clinics, their staff and visitors to this website, we decide why and how data is used. Here we are the data fiduciary.
- For patients of a clinic that uses Tejoya, the clinic decides why and how their data is used. The clinic is the data fiduciary and we are its data processor. We use patient data only on the clinic’s instructions and under a written agreement with the clinic. If you are a patient, please contact your clinic first. You can also write to us and we will pass your request to the clinic.
3. What we collect
From website visitors and clinics
- What you type into our forms: name, clinic name, area, phone or WhatsApp number, email and your message.
- Clinic account details: owner and staff names, phone numbers, email addresses, clinic address, rate card, doctors’ timings and billing details such as GSTIN.
- Basic technical data: IP address, browser type, pages visited and error logs, used to keep the site and app secure and working.
On behalf of clinics, about their patients
- Name, WhatsApp number and preferred language.
- Messages exchanged with the clinic on WhatsApp.
- Appointment details, deposit status (paid or not, as marked by the clinic), package sessions used and left, and review requests sent.
- The treatment a patient is interested in, for example “laser hair reduction”.
- Opt-in and opt-out records, with date and time.
We do not collect medical records, diagnoses, prescriptions, clinical notes or photos. Teja does not give medical advice. Please do not send medical details in WhatsApp chats with Teja; the clinic’s doctor will speak to you directly.
If a patient sends medical details anyway: photos, videos, documents and voice notes are not downloaded or stored by Tejoya. A text message with symptoms or medicines stays in the chat history so that the clinic’s staff can read and reply to it; its text may be processed by our AI provider only to recognise that it is a medical question and hand the chat to a person. It is not used for anything else, and it is deleted with the rest of the chat under the retention periods below.
The treatment plan Teja sends after a consultation is a quotation prepared by the clinic: the services, number of sessions, price and validity. It does not contain diagnoses or clinical notes.
4. Why we use it
- To provide Tejoya: reply to enquiries, book and remind appointments, send deposit requests to the clinic’s own UPI, follow up on treatment plans and packages, request reviews and send reports to the clinic owner.
- To set up and support clinic accounts, send invoices and keep tax records.
- To answer demo requests and questions sent through this website.
- To keep our services secure, prevent misuse and fix errors.
- To meet legal duties, such as tax and company law.
We do not sell personal data. We do not use patient data for our own marketing.
5. Consent
When you submit a form on this website you agree that we may contact you about your request. Clinics must collect each patient’s consent before Tejoya sends them business messages, and we record every opt-in and opt-out. You can withdraw consent at any time: reply STOP on WhatsApp, or email privacy@tejoya.com. Withdrawing consent does not affect what was done before.
6. AI and automated replies
Tejoya uses an AI model to read incoming messages, understand what the patient is asking and draft a reply within the clinic’s rules. Prices, dates, slots and balances are decided by fixed rules set by the clinic, not by the AI. Medical questions, complaints, refunds and anything uncertain are handed to the clinic’s staff. Any offer or bulk message needs the clinic owner’s approval before it is sent.
7. Who we share data with
We share data only with service providers who help us run Tejoya, under contracts that require them to protect it:
- Meta Platforms (WhatsApp Business Platform), to send and receive WhatsApp messages on the clinic’s number.
- Anthropic (Claude AI), to understand messages and draft replies. Under Anthropic’s commercial terms, data sent through its API is not used to train its models.
- Hostinger, for website and application hosting.
- Email, error-monitoring and backup providers, to send service emails, find and fix errors, and keep backups.
- Government or law-enforcement bodies, only when the law requires it.
Some providers may process data outside India. We transfer data only as allowed under Indian law.
8. How long we keep data
- Website enquiries: up to 24 months after our last contact with you, unless you become a customer.
- Clinic account data: while the subscription is active, then up to 90 days so the clinic can export it, after which we delete it.
- Patient data: as instructed by the clinic. When a clinic leaves Tejoya, the clinic has 30 days to export its data, and we delete all of it within 90 days of the end of the subscription.
- On an explicit deletion request (from a patient through the clinic, or from a clinic): within 30 days, except records the law requires to be kept.
- Invoices and tax records: for as long as tax and company law requires (usually 8 years).
9. How we protect data
Data is encrypted in transit. WhatsApp access keys are stored encrypted. Each clinic’s data is kept separate, staff access is limited to what their role needs, every action is logged, and backups are kept securely. If a personal data breach happens, we will inform the affected clinic, the Data Protection Board of India and affected people as the law requires.
10. Your rights
Under the DPDP Act you can ask us to:
- Tell you what personal data we hold about you and how we use it
- Correct, complete or update your data
- Erase your data when it is no longer needed
- Withdraw your consent
- Name another person to exercise your rights if you die or cannot act
- Resolve a complaint (grievance)
Email privacy@tejoya.com from the phone number or email address we have for you. For patient data, we will work with your clinic to act on your request. See also our data deletion page.
11. Children
Our website and service are meant for adults running or working at clinics. If a clinic’s patient is under 18, the clinic must get verifiable consent from a parent or guardian before using Tejoya to message them, and Tejoya must not be used to track children or target them with offers.
12. Cookies
This website uses only the cookies it needs to work and stay secure. If we add analytics cookies later, we will update this policy first.
13. Grievance Officer
Bala Kishore Badita, Grievance Officer
Javita Consultancy Private Limited
Plot No 77, K G N Colony, Ameenapur, Hyderabad, Rangareddy, Telangana 502032, India
Email: privacy@tejoya.com
Phone: +91 87122 87999
We will acknowledge your complaint within 7 days and resolve it within the time set by the DPDP Rules. If you are not satisfied, you may approach the Data Protection Board of India.
14. Changes to this policy
If we change this policy, we will update the date at the top. If the change is important, we will tell clinics by email or WhatsApp before it takes effect.