Privacy Policy

1. Who We Are

Avinya Plus is a clinic management platform built for Indian healthcare providers. We operate at avinyaplus.com. This Privacy Policy explains how we collect, use, and protect information when you use our service.

2. Information We Collect

We collect information you provide directly, information generated through use of the service, and limited technical data:

• ·Account information — name, email address, clinic name, and role when you register.
• ·Clinic data — patient records, appointments, prescriptions, and billing records entered by your team. This data belongs to your clinic.
• ·Usage data — pages visited, features used, timestamps, and error logs to improve the service.
• ·Device & network data — IP address, browser type, and operating system for security and fraud prevention.

3. How We Use Your Information

• ·Provide, maintain, and improve the Avinya Plus service
• ·Send account and service-related communications
• ·Detect and prevent fraud, abuse, or unauthorised access
• ·Comply with legal obligations under Indian law

We do not sell your data or use clinic/patient data for advertising.

4. Data Storage & Security

All data is stored on servers located in India or within jurisdictions that provide adequate data protection. We use PostgreSQL Row Level Security (RLS) to ensure strict data isolation between clinic accounts — no clinic can access another clinic's data at the database level. Access to production data is restricted to authorised personnel only. All data in transit is encrypted using TLS 1.2+.

5. Patient Health Information

Patient records entered into Avinya Plus are owned by the clinic, not by Avinya Plus. We act as a data processor on your behalf. Prescription records include PHI access audit logging. We do not access patient records except as required to provide technical support, with the clinic's explicit authorisation.

6. Data Sharing

We do not share your data with third parties except:

• ·Infrastructure providers (hosting, database) under strict data processing agreements
• ·When required by Indian law, court order, or government authority
• ·With your explicit written consent

7. Your Rights

Under applicable Indian data protection laws, you have the right to:

• ·Access the personal data we hold about you
• ·Correct inaccurate or incomplete data
• ·Request deletion of your account and associated data
• ·Export your clinic's data in a portable format

To exercise any of these rights, contact us at hello@avinyaplus.com.

8. Cookies

We use only essential cookies required to authenticate your session and maintain your preferences. We do not use advertising or tracking cookies.

9. Changes to This Policy

We may update this policy as the service evolves. Material changes will be communicated via email to registered users at least 14 days before they take effect. Continued use of the service after the effective date constitutes acceptance of the revised policy.

10. Contact

For privacy-related questions or requests, contact us at hello@avinyaplus.com.