Legal

    Your Privacy, Protected

    We handle patient data with the same care you do. Here's exactly what we collect, how we protect it, and what rights you have.

    What We Collect
    • Account information: your email address and display name used to create your Vaidya OS account.
    • Clinic information: your clinic name and branding details you configure in settings.
    • Patient records: names, ages, contact numbers, diagnoses, prescriptions, visit history, and follow-up notes that you enter into the system.
    • Usage data: basic analytics such as login timestamps and feature usage to help us improve the product. This data is never linked to patient records.
    How It's Stored & Protected
    • All data is stored on Supabase, a secure cloud database platform using 256-bit SSL encryption in transit and AES-256 encryption at rest.
    • Row-level security (RLS) is enforced at the database level — your data is completely isolated from other users. No one else can access your patient records.
    • Automatic backups are taken daily. Your data is never stored on our local servers.
    Who Can Access Your Data
    • Only you — the authenticated account holder — can view and manage your patient records.
    • Zengro staff do not have access to your patient data. Our support team can only see account-level metadata (email, subscription status) when needed to resolve issues.
    • No third-party analytics, advertising, or tracking tools have access to patient data.
    What We Don't Do
    • We do not sell, rent, or trade your data — ever.
    • We do not use patient data for advertising or profiling.
    • We do not share data with third parties except as required to provide the service (e.g., Supabase for storage, Stripe for payments). These providers are bound by strict data processing agreements.
    Data Retention & Deletion
    • If you cancel your subscription, your account is paused — not deleted. All your data remains intact and accessible if you resubscribe.
    • You can request permanent deletion of your account and all associated data at any time by emailing us. We will complete the deletion within 30 days.
    • We retain only the minimum data required for legal and accounting purposes (subscription records) after account deletion.
    DPDP Act 2023 Compliance
    • Vaidya OS complies with India's Digital Personal Data Protection (DPDP) Act 2023.
    • The lawful basis for processing your data is your explicit consent given at account signup.
    • As a Data Fiduciary, Zengro is responsible for ensuring your personal data is processed lawfully, fairly, and transparently.
    • You have the right to access, correct, and erase your personal data at any time by contacting us.
    Cookies
    • Vaidya OS uses only essential session cookies required for authentication. These are deleted when you log out.
    • We use the Meta (Facebook) Pixel to measure the effectiveness of our advertising campaigns. This sets a cookie that tracks ad conversions. No personal health data is shared with Meta.

    Privacy Questions?

    For any privacy-related questions, data deletion requests, or to exercise your rights under the DPDP Act 2023, contact us directly. We respond within 2 business days.

    gaurav@vaidyaos.in

    Last updated: March 2026 · Vaidya OS by Zengro