Privacy Policy

This policy covers two kinds of people: (a) the facility staff and account holders who use Medisoph ("Users"), and (b) the residents, patients, and individuals whose information is entered into Medisoph by a facility ("Resident Data"). For Resident Data, the facility is the data fiduciary and Medisoph acts as a data processor on the facility's instructions.

Account and contact information. Name, work email, phone number, role, facility name, and similar details provided at signup or when contacting us.

Facility and operational data. Information your facility enters into the Service, which may include resident records, care plans, medication records, vitals, billing and invoice data, insurance and claims information, staff records, and compliance documents.

Payment information. Subscription and billing details. Card and bank details are handled directly by our payment processor; we do not store full card numbers on our systems.

Usage and technical data. Log data such as IP address, browser type, pages accessed, and timestamps, used to operate, secure, and improve the Service.

• To provide, maintain, and improve the Service;
• To authenticate users and secure accounts;
• To process subscriptions and payments;
• To provide customer support and respond to enquiries;
• To send service-related communications, such as security and billing notices;
• To detect, prevent, and address fraud, abuse, and technical issues;
• To comply with legal obligations.

We do not sell personal data. We do not use Resident Data for advertising. We process Resident Data only to provide the Service to the facility and on the facility's instructions.

The Service is hosted on Google Cloud infrastructure in the Mumbai (asia-south1) region. Data is encrypted in transit using TLS and encrypted at rest. Access to production systems is restricted to authorised personnel. Each facility's data is isolated within a multi-tenant database boundary so that one facility cannot access another's records.

No method of transmission or storage is perfectly secure. While we work to protect your information using appropriate technical and organisational measures, we cannot guarantee absolute security.

We share information only as needed to run the Service:

• Infrastructure: Google Cloud (hosting, database, storage);
• Payments: our payment processor, to process subscription transactions;
• Communications: email delivery providers for transactional messages;
• Legal: where required by law, regulation, legal process, or to protect rights and safety.

These providers are bound to handle data only for the purposes of providing their services to us. We do not share Resident Data with third parties for their own purposes.

We retain Customer Data for as long as your account is active. On cancellation or termination, we make Customer Data available for export for a limited period, after which it may be deleted from active systems. Backups are retained for up to thirty (30) days and then permanently deleted in the ordinary backup rotation. We may retain limited records longer where required to comply with legal, tax, or accounting obligations.

Subject to applicable law, you have the right to access, correct, and request deletion of your personal data, to withdraw consent, and to raise a grievance about how your data is handled. Where Medisoph processes Resident Data on behalf of a facility, requests from residents should be directed to the facility as the data fiduciary; we will assist the facility in responding.

To exercise your rights or raise a concern, contact us using the details below. We will respond within the timelines required by applicable law.

We use strictly necessary cookies to keep you signed in and to operate the Service securely. We do not use advertising cookies. You can control cookies through your browser settings, though disabling necessary cookies may affect your ability to sign in.

The Service is intended for use by care facilities and their staff. Resident Data may include information about adults under care. We do not knowingly use the Service to market to or collect data directly from minors as consumers.

We may update this Privacy Policy from time to time. Material changes will be notified through the Service or by email. The "last updated" date at the top reflects the most recent revision.

For privacy questions, data requests, or grievances, contact our grievance point of contact:

Email kartik@medisoph.com or support@medisoph.com
Phone +91 87670 21781