Privacy Policy

When you use HMS, we collect information you provide directly:

• Account information: Name, email address, phone number, clinic name, and password when you create an account.
• Patient data: Patient records, medical histories, appointments, prescriptions, and vitals entered by your clinic staff.
• Usage data: How you interact with the platform (pages visited, features used) to improve our service.

• To provide and maintain the HMS platform for your clinic.
• To authenticate users and enforce role-based access control.
• To send transactional emails (invitations, password resets, appointment reminders).
• To improve our product and fix issues.
• To comply with legal obligations.

Each clinic's data is fully isolated from every other clinic. We enforce this through:

• Row-level security at the database level — one clinic cannot query another's data.
• 256-bit encryption for data in transit (TLS) and at rest.
• Application-level tenant scoping on every database operation.
• All data is hosted in India (Mumbai region).

We do not sell, rent, or share your clinic's data with third parties. We only share data when:

• Required by law (court order, legal process).
• Necessary to provide our service (e.g., email delivery via our transactional email provider — only email addresses, no patient data).

Clinical data (patient records, medical histories, prescriptions) is retained for the duration of your account and as required by applicable medical record retention laws. Non-clinical data may be deleted upon account termination.

Under India's Digital Personal Data Protection Act, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure of your data (subject to legal retention requirements).
• Withdraw consent for data processing.

To exercise these rights, contact us at the email below.

We use essential cookies only — for authentication sessions and user preferences (theme, language). We do not use tracking cookies or third-party analytics cookies.

We may update this policy from time to time. We will notify registered users of significant changes via email. Continued use of the platform after changes constitutes acceptance.