Privacy Policy

This Privacy Policy describes how AyuraCliniQ (“AyuraCliniQ”, “we”, “us”) handles information when you use our clinic management software website and signed-in workspace at ayuracliniq.com and related pages.

AyuraCliniQ is staff-facing software for clinics. It is not a patient portal. Patients do not create their own AyuraCliniQ accounts in the current product.

Account and profile information: when you sign up or use settings, we process information such as your name, email address, password (stored by our authentication provider), clinic name, and staff profile details you choose to add.

Clinic workspace data: you and your staff enter information your clinic needs to operate, such as patient demographics and contact details, appointments, visit notes, vitals, prescriptions, invoices, payments recorded in the product, and staff records. This data is entered to support your clinic’s operations.

Contact and support messages: if you use the Contact page or email us, we receive the information you submit (for example name, email, clinic name, and message content) so we can respond.

Subscription and billing preferences: workspace owners may save plan preferences and complete checkout for AyuraCliniQ subscriptions. Payment card or UPI details are handled by our payment partner during checkout — we do not intend to store full payment credentials on AyuraCliniQ servers.

When you use the hosted service, our infrastructure and providers may process technical information such as IP address, browser type, device information, timestamps, and diagnostic logs needed to operate, secure, and troubleshoot the service.

We use this information to deliver the application, prevent abuse, and improve reliability — not to sell patient lists or run advertising profiles across clinics.

Provide and maintain AyuraCliniQ, including authentication, clinic workspaces, appointments, consultation documentation, prescriptions, billing features, reports, and owner subscription management.

Communicate with you about your account, security, service changes, or support requests.

Process workspace subscription checkout and reconcile payment status with our payment partner where applicable.

Comply with law and protect the service, users, and clinics where we reasonably believe it is necessary.

Data about patients is entered by your clinic staff under your clinic’s direction. Your clinic is responsible for having a lawful basis to collect and use that information and for responding to patient requests about clinical records.

AyuraCliniQ is designed so each clinic workspace keeps its operational data separate. Staff access is intended to follow roles you assign (such as owner, doctor, or receptionist) within that workspace.

We do not offer cross-clinic patient search or a marketplace of patient data between unrelated clinics.

We use third-party providers to run AyuraCliniQ, including hosting, database and authentication (Supabase), email delivery for contact and transactional messages (such as Resend), payment processing for workspace subscriptions (PayU), and infrastructure providers that host the application (such as Vercel). These providers process information on our instructions to deliver the service.

We do not list every subprocessors on this page. If you need details for a vendor review, contact us using the details below.

We use reasonable technical and organisational measures appropriate to a hosted SaaS product, such as access controls, encrypted connections (HTTPS), and provider-side security features. No method of transmission or storage is completely secure.

You are responsible for safeguarding staff credentials, assigning appropriate roles, and using the product in line with your clinic’s policies.

We retain account and workspace data for as long as your subscription or trial is active and as needed to provide the service, resolve disputes, enforce terms, and meet legal obligations.

Specific retention schedules for backups or inactive accounts may change as the service matures. If you need account or workspace deletion, contact us. Some data may be retained where required by law or legitimate business needs (for example billing records).

Deletion requests from individual patients about clinical records should generally be directed to the clinic that created the record.

Account holders may update profile and clinic settings in the product where those controls exist.

You may contact us to request access, correction, or deletion of personal information we hold about you as an account holder, subject to applicable law and technical constraints.

We will respond to reasonable requests in a practical timeframe. We may need to verify your identity before acting on a request.

AyuraCliniQ accounts are for clinic staff. Clinics may record paediatric patients as part of care; those records are the clinic’s responsibility.

AyuraCliniQ is operated from India. If you access the service from elsewhere, your information may be processed in India and where our providers operate.

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will change when we do. Continued use of the service after changes means you accept the updated policy.

Privacy questions and requests: ayuracliniq@gmail.com

Postal address: E205, 9th Main, 19th Cross, Virat Nagar, Bommanahalli, Bangalore - 560068, Karnataka, India

You may also use the Contact page on ayuracliniq.com.