arrow_backBack to home

Legal

Privacy Policy

Last updated: 4 June 2026

1. Who we are

ClinOps is operated by CLINOPS, a registered MSME (Udyam Registration No. UDYAM-KR-03-0715492), based in Bengaluru, Karnataka, India. We build and operate a cloud-based clinic management platform for independent clinics and healthcare providers across India.

When this policy says "ClinOps", "we", "us", or "our", it refers to CLINOPS. Our registered address is Officers Model Colony, SM Road, Bengaluru, Karnataka 560057.

2. What data we collect

We collect two categories of data:

Clinic and staff data

When a clinic registers, we collect the clinic name, address, GST number (if applicable), and contact details of the clinic owner and staff. We also collect login credentials (email and hashed passwords) and device/session information for security purposes.

Patient data entered by clinics

Clinic staff enter patient records on behalf of their patients. This includes patient name, phone number, date of birth, health information, consultation notes, prescriptions, medical history, and billing records. ClinOps acts as a data processor for this information — the clinic is the data fiduciary under the DPDP Act 2023.

3. How we use data

We use data solely to provide the ClinOps clinic management service. Specifically:

  • check_circleTo operate the platform and enable clinics to manage appointments, patients, prescriptions, and billing
  • check_circleTo send transactional communications (account setup, OTP verification, subscription receipts)
  • check_circleTo maintain security, detect fraud, and enforce our Terms of Service
  • check_circleTo improve and develop platform features (using aggregated, anonymised analytics only)

We never sell, rent, or share patient data with any third party. Patient data is never used for advertising, profiling, or any purpose other than operating your clinic's account.

4. Data storage and security

All patient and clinic data is stored on infrastructure hosted in Mumbai, India. No patient data leaves Indian territory.

  • encryptedSensitive data at rest is encrypted with AES-256-GCM
  • encryptedAll data in transit is protected by TLS
  • encryptedEach clinic's data is isolated by row-level security — one clinic cannot access another's records
  • encryptedStaff access requires multi-factor authentication (MFA) on every session

We are designed to comply with India's Digital Personal Data Protection Act 2023 (DPDP Act). Consent is captured at registration. Patients may request data erasure via OTP-verified deletion. Per-patient data export is available on request.

5. Data retention and deletion rights

We retain clinic and patient data for as long as the clinic's account is active. If a clinic closes its account, we retain data for 90 days to allow for any final exports, after which all data is permanently deleted from our systems.

Under the DPDP Act 2023, patients have the right to:

  • check_circleAccess — request a copy of their personal data held in the platform
  • check_circleCorrection — request correction of inaccurate data
  • check_circleErasure — request deletion of their data, verified by OTP
  • check_circleGrievance redressal — raise a complaint with us directly

Clinics (as data fiduciaries) are responsible for obtaining consent from patients before entering their data into the platform.

6. Third-party services

ClinOps uses a limited set of third-party services to operate the platform, including cloud infrastructure (hosted in India), payment processing, and transactional messaging (WhatsApp/SMS for OTPs). These providers are contractually bound to process data only as instructed by us and not to use it for any other purpose.

We do not use advertising networks, data brokers, or social media tracking pixels on the clinic platform.

7. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated to clinic administrators by email or in-app notification at least 14 days before they take effect. Continued use of the platform after that date constitutes acceptance of the updated policy.

8. Contact for privacy concerns

For any questions, data access requests, deletion requests, or privacy concerns, please contact us directly:

mailsuperadmin@clinops.co.in
phone+91 7406121610
location_onCLINOPS, Officers Model Colony, SM Road, Bengaluru, Karnataka 560057