Legal
Privacy Policy
Last updated
NMC Ad Guide (nmc-guide.medvyn.in) is operated by MEDVYN. Doctors, hospitals and agencies use it to check advertising content, which is often unpublished and commercially sensitive — so we keep what you submit private to your account and use it only to produce your reports.
What we collect
- Account details — your name, email address and (optionally) profession. If you use a password, we store only a salted scrypt hash of it, never the password itself. If you sign in with Google, we receive your name, email address, profile picture and Google account ID.
- Content you check — the text you paste or the image you upload, the context you select (who is publishing, where, whether AI was used), a title derived from it, and the report we generate. Uploaded images are re-encoded on our server, which strips embedded metadata such as camera details and GPS location.
- Security and abuse-prevention data — your IP address (recorded with each check and with sign-in, sign-up and password-reset attempts), your browser's user-agent for active sessions, and timestamps.
Please don't submit information that identifies patients. Blur faces and remove names, case numbers and similar details before uploading — the guidelines themselves restrict publishing them (clauses 6.1–6.4).
How we use it
- To run your checks, show your reports and keep your history.
- To sign you in, keep your account secure, and send password-reset emails.
- To prevent abuse — for example, rate limits on sign-in attempts and daily check limits.
- To fix problems and improve the checker, using our own access to the stored data.
We do not sell your data, we do not use your content for advertising, and we never publish or share what you submit. We don't use advertising or third-party analytics cookies.
Who processes it for us
- Anthropic — when AI review is enabled, the text or image you submit, together with your selected context, is sent to Anthropic's Claude API to generate the analysis. Anthropic processes it as our service provider under its commercial API terms.
- Our hosting provider — the app and its database run on servers we rent, which store the data on our behalf.
- Our email provider — to deliver password-reset emails to your address.
- Google — only if you choose “Continue with Google”, under Google's own privacy policy.
When AI review is not enabled, checks run entirely on our own server, including reading text from images.
Cookies
We use only cookies that are needed for the service to work. All are first-party and inaccessible to scripts.
| Cookie | Purpose | Lasts |
|---|---|---|
| nmcg_session | Keeps you signed in | 30 days |
| nmcg_draft | Links a check you started before signing in to your account once you sign in | 24 hours |
| nmcg_oauth | Protects the Google sign-in hand-off | 10 minutes |
How long we keep it
- Your account, checks and reports: until you delete them or ask us to delete your account.
- Sign-in sessions expire after 30 days; password-reset links after 1 hour.
- Records of sign-in and similar attempts used for rate limiting: about two days.
- Checks started without signing in and never claimed aren't linked to any account and may be deleted at any time.
Security
Traffic is encrypted with TLS. Passwords are hashed with scrypt, sessions use signed httpOnly cookies, and reports and images are served only to the account that created them. No system is perfectly secure, but we work to protect your data and will notify you as the law requires if a breach affects you.
Your rights
Under India's Digital Personal Data Protection Act, 2023 you can ask us to access, correct or erase your personal data, withdraw consent, and raise a grievance. Email support@medvyn.in from the address on your account and we'll respond within a reasonable time. Deleting your account removes your checks and reports.
Children
NMC Ad Guide is a professional tool and is not meant for anyone under 18.
Changes
If we change this policy, we'll update this page and the date above; for significant changes we'll tell signed-in users. See also our Terms of Use.