Privacy Policy
1. Who we are and our role
StomaGrid Tech Unit, Plot no.20, Saptshrungi Bungalow, Jawahar Bakery Road, Dhankwadi, Pune, Maharashtra, 411043. For clinic account details and website visitors, StomaGrid decides how the data is used. For patient data that clinics enter, the clinic is the Data Fiduciary and StomaGrid is its Data Processor (see the Data Processing Agreement).
2. What we collect
- Clinic and contact details you give us in forms, at checkout or at sign-in (name, clinic name, mobile number, email).
- Subscription and payment records (plan, amount, payment reference). Card and UPI details are handled by Razorpay and are not stored by StomaGrid.
- Security and usage logs (time, IP address, requested page or action).
- Patient data that clinics enter, processed on the clinic's behalf.
- Call audio and transcripts, if the clinic uses the AI voice receptionist.
3. How we use it
To provide the service, take payment, give support, keep the service secure and meet legal duties. We do not sell personal data. Our public pages carry no advertising or analytics trackers.
4. Where data is stored
Providers that process data for StomaGrid include Cloudflare (website hosting), Supabase (database), Google (Drive in the clinic's own account, and AI), Meta (WhatsApp), Telegram (alerts), Razorpay (payments) and, if voice is used, Sarvam and Bolna. The full list is in the Data Processing Agreement.
5. Messages and alerts
WhatsApp, SMS and email messages carry no diagnosis or treatment detail. Prescriptions and invoices are opened through a secure link. Telegram alerts use case numbers, not patient names.
6. Retention and deletion
We keep a clinic's records for the subscription term plus a 30-day export window after it ends. Data is deleted on a verified request, except where the law requires us to keep it. Call recordings and transcripts follow the same rule. Security and access logs are kept for at least 180 days.
7. Your rights
You can ask to access, correct or erase your personal data, or raise a complaint, through our Grievance Officer. Patients should first contact their clinic, which decides how patient data is used.
8. Security
We use access controls, separation between clinics, encryption in transit and audit logs. No system is perfectly secure, and we work to find and fix weaknesses.
9. Cookies and scripts
We use only essential cookies, such as a sign-in indicator. The Cloudflare verification script and the Razorpay payment script load only when you use a form or checkout.
10. Children
StomaGrid is a service for clinics and is not directed at children. Clinics must obtain any consent the law requires for patients who are minors.
11. Changes and contact
We may update this policy; the version and date are shown above. Questions: Contact Support.