Privacy Policy

Last updated: August 2026

This Privacy Policy explains how ClinicSuite360 ("we", "us") collects, uses, and protects information when clinics and their patients use the Platform. We are built for Indian clinics and designed around the Digital Personal Data Protection Act (DPDP) and ABDM consent principles.

1. What we collect Clinic and staff account details (name, email, phone, role); patient records entered by your clinic (demographics, appointments, clinical notes, prescriptions, billing); and usage data (login activity, feature usage) used to operate and improve the Platform.

2. How data is isolated Every clinic's data is logically isolated from every other clinic at the database level (row-level security), not just at the application layer -- one clinic can never query or see another clinic's records, even in the event of an application bug.

3. How we use data We use clinic and patient data solely to provide the Platform's functionality: appointments, EMR, billing, communications (WhatsApp/SMS/email) your clinic sends to its own patients, and the AI features your clinic has enabled. We do not sell patient data, and we do not use one clinic's patient data to train models used by other clinics.

4. AI processing When AI features (ambient scribe, prescription safety checks, campaign copy, voice receptionist) are enabled, relevant data is sent to the configured AI provider solely to generate the requested output, and is not retained by us beyond what's needed to deliver that feature.

5. Data storage and security Data is encrypted in transit (TLS) and at rest where supported by the underlying infrastructure. Access to production data is restricted to authorized personnel for support and operational purposes only.

6. Patient consent Clinics are responsible for obtaining appropriate patient consent for data collection and, where applicable, ABDM-based record sharing. The Platform provides consent-tracking tools to support this.

7. Data retention and deletion Data is retained for as long as your clinic's account is active, plus a reasonable export/retention window after termination, after which it is deleted in line with applicable law.

8. Your rights Clinics and patients may request access to, correction of, or deletion of their personal data, subject to any legal or clinical record-keeping requirements, by contacting us through the support channel listed on our website.

9. Changes to this Policy We may update this Privacy Policy periodically. Material changes will be communicated through the Platform or by email.

10. Contact Privacy questions can be sent to the support contact listed on our website.