Cookies are small text files placed on your device when you visit a website. Similar technologies include pixel tags, web beacons, local storage objects and, in mobile applications, software development kit (SDK) identifiers such as device identifiers and push notification tokens. On the OPLive App website these technologies help the site function correctly, remember preferences and analyse performance. OPLive App and OPLive Dr do not use browser cookies; they use the SDK identifiers described in Section 4. This Policy covers both.
| Cookie Category | What It Does |
|---|---|
| Strictly Necessary | Required for the Applications to function: login sessions, payment flow, security. Cannot be disabled. |
| Functional / Preference | Remember User preferences: language, timezone, saved searches. |
| Analytics & Performance | Understand Application usage across OPLive App and OPLive Dr (anonymised and aggregated only): page views, session duration, error tracking. |
| Security & Fraud Prevention | Detect and prevent malicious activity, unauthorised access, fraudulent transactions and automated abuse through appropriate security technologies implemented by OPLive App from time to time. |
| Marketing (opt-in only) | Not used. OPLive App does not place advertising or marketing cookies and does not share User data with any advertising network. Should this position change, such cookies would be placed only with the User's prior explicit opt-in consent, as required under applicable law. |
OPLive App does not use advertising or marketing tracking technologies, and no third-party advertising network receives User data. The third parties that receive User data in connection with the operation of the Applications and the website are set out below. A current and complete list, including the categories of data processed and the country of storage for each, is published at www.oplive.app/sub-processors and is also available on request from the Data Protection Officer at dpo@oplive.app.
| Third Party | Service and Where Data is Processed |
|---|---|
| Google LLC / Firebase | Push notifications via Firebase Cloud Messaging. Processes device push tokens, application and device identifiers, and technical delivery data. Overseas. |
| Twilio Inc. | Video and audio infrastructure for online consultations. Processes technical data and session metadata; media is relayed in transit and not recorded. Overseas. |
| Microsoft Azure | Cloud hosting, storage and backup of the platform and its databases. India (Central and South India regions). |
| SMSBuddy | SMS gateway for one-time passwords and appointment notifications. Processes mobile number, message content and delivery metadata. India. |
| Razorpay | Payment gateway and aggregator. Processes payment and transaction data; full card details remain within Razorpay's PCI-DSS environment. India. |
| SBIePay / State Bank of India | Bank payment gateway and settlement. Processes payment and transaction data. India. |
Each of these providers processes information only in accordance with applicable law, its contractual obligations and OPLive App's documented instructions, under a Data Processing Agreement. OPLive App takes reasonable measures to ensure that they maintain appropriate security and confidentiality safeguards, and no new provider is engaged without prior authorisation and an equivalent agreement.
Where required under applicable law, OPLive App shall obtain the User's consent before placing non-essential cookies on the User's device. Strictly Necessary Cookies required for the operation and security of the Platform do not require separate consent.
The OPLive App website presents a consent banner before any non-essential cookie is placed, allowing the User to accept or decline analytics and performance cookies. Strictly Necessary cookies required for operation and security are exempt from this requirement.
Some browsers transmit a "Do Not Track" (DNT) signal. As there is no uniform industry standard for responding to DNT signals, the OPLive App website and the Applications do not alter their behaviour in response to them. Users may instead decline non-essential cookies through the consent banner on the website, or manage analytics and diagnostics preferences in the Applications under Settings > Privacy.
OPLive App implements reasonable technical and organisational measures to protect information collected through cookies and similar technologies against unauthorised access, alteration, disclosure or destruction. However, no method of electronic transmission or storage can be guaranteed to be completely secure.
OPLive App may amend this Cookie & Tracking Policy from time to time to reflect changes in applicable law, technology or business practices. The latest version shall always be available on the Platform and shall become effective from the Effective Date stated therein.