ClinicConnect AI is operated by Archana Info Solutions Pvt Ltd ("we", "us"). This Privacy Policy describes how we collect, use and protect personal data when you use the ClinicConnect AI platform.
1. Data we collect
- Account data: name, email, phone, clinic / hospital, role.
- Patient data: entered by your clinic staff (demographics, vitals, prescriptions, lab reports). You are the data fiduciary; we are the data processor.
- Usage data: page views, feature usage, device, IP, audit logs.
- Payment data: billing details processed by Razorpay; we never store full card numbers.
2. How we use it
- Operate, secure and improve the ClinicConnect AI platform.
- Send transactional notifications (appointment reminders, e-prescriptions) on instructions from your clinic.
- Detect fraud, abuse, and ensure regulatory compliance (DPDP Act, ABDM HIE policies).
3. Data residency & security
All primary databases, file storage and AI inference for sensitive data are hosted in India-region data centres. We use TLS in transit, AES-256 at rest, role-based access controls, and append-only audit logs.
4. Sharing
We do not sell your data. We share patient data only with: (a) the data fiduciary clinic that owns it; (b) ABDM / HIE if your patient has explicitly consented through ABDM Health ID linking; (c) sub-processors under written contracts that meet DPDP standards.
5. Your rights
Under the DPDP Act, patients can request access, correction, erasure or portability of their personal data through the data fiduciary clinic that holds it. ClinicConnect AI provides clinics with built-in tooling to fulfil these requests.
6. Retention
Default retention for patient records is 7 years from the last consult, configurable per clinic. Audit logs are retained for 5 years. Backups expire after 90 days.
7. Contact
For privacy enquiries, write to privacy@clinicconnect.ai or our Data Protection Officer at dpo@clinicconnect.ai.