Privacy Policy
This Privacy Policy explains how Six Figures ("we", "us", the "Service") — a practice and business management software available at sixfigures.in and through our desktop and mobile applications — collects, uses, and protects information. By creating an account or using the Service you agree to this policy.
1. The most important thing: your data lives in YOUR cloud
Six Figures is architected so that each clinic's or dealer's operational data (patients/customers, appointments, photos, notes, repairs, invoices, payments) is stored in a Google Firebase project owned by you, in your own Google account. We do not host, copy, or control that database. You are the owner and the data fiduciary for the records you keep in it.
2. What we collect on our side
- Account & directory information: your name, email, phone number, business/clinic name, city, GST number (dealers), account type, plan and trial status — kept in our master directory to operate login, routing, and billing.
- Payment information: processed by our payment partner Cashfree Payments India Pvt. Ltd. We never see or store your full card number, CVV, or banking credentials; we receive only transaction status, masked references, and subscription state.
- Usage & technical data: basic logs (sign-in time, app version, device/browser type) used for security and support.
3. Health and patient data (for clinics)
Patient records that practitioners store in their own Firebase project may include health information. The practitioner is the data fiduciary for that data under the Digital Personal Data Protection Act, 2023 (DPDPA) and applicable medical-records regulations; Six Figures provides the software tooling. We do not access patient data except where you explicitly grant temporary access for support, and we never sell or use it for advertising.
4. How we use information
- To provide, secure, and improve the Service;
- to manage subscriptions, trials, invoices and payment receipts;
- to send service messages (renewals, security, feature notices) by email, SMS or WhatsApp;
- to comply with law.
5. Sharing
We share information only with: (a) Google LLC (Firebase/Google Cloud infrastructure), (b) Cashfree for payments, (c) communication providers for transactional messages, and (d) authorities where the law requires. We do not sell personal data.
6. Security
Transport encryption (HTTPS/TLS) everywhere; authentication via Google Firebase Authentication; access rules requiring sign-in on every database and storage bucket; and the structural protection that your business data sits in your own cloud project.
7. Retention & deletion
Directory and billing records are retained while your account is active and as required by tax law thereafter. Data in your own Firebase project is under your control at all times — you may export or delete it whenever you wish. To delete your Six Figures account and directory record, contact us at the details below.
8. Your rights
Under the DPDPA you may request access, correction, or erasure of the personal data we hold about you, and may withdraw consent for non-essential communications. Write to us and we will respond within a reasonable period.
9. Children
The Service is a business tool for adults. We do not knowingly collect data from children for marketing; patient records of minors are handled by the treating practitioner as data fiduciary.
10. Changes & contact
We may update this policy and will post the new version here. Questions: +91 93222 50741 · malharkbakshi@gmail.com.