ClinicX, developed and operated by ASAJA IT Solutions, is committed to protecting the privacy and security of information processed through the platform. This Privacy Policy explains what information ClinicX may collect or receive, how we use it, when it may be shared with service providers, how we protect it, how long it may be retained, and how you can request access, correction, or deletion. By using ClinicX, you acknowledge this Privacy Policy.
ClinicX may collect or receive information that is necessary to provide its clinic, patient, appointment, account, payment and related services. The information collected depends on the features used and the user's role.
Account & Contact InformationName, email address, phone number, account details, clinic or organisation information, professional information, and information required to authenticate and secure access to the service.
Patient & Healthcare InformationAuthorised clinic users, such as doctors and assistants, may enter patient information. Depending on the features used, this may include patient identity and contact details, demographic information, appointments, clinical notes, symptoms, diagnoses, prescriptions, treatment information, reports and other healthcare information entered by authorised users.
Usage & Technical DataInformation needed to operate, secure, troubleshoot and improve ClinicX, such as timestamps, feature usage, application events, device or operating-system information, error information and diagnostic information.
Payment & Transaction InformationWhen online payments are available, transaction-related information may be processed through Razorpay. Payment details required to complete a transaction may be transmitted to Razorpay. ClinicX does not intentionally collect or store complete card or banking credentials through its own application interface.
We use information only as reasonably necessary to provide, secure, maintain and improve ClinicX and its features.
Service ProvisionTo create and manage accounts, provide clinic and patient-management features, manage appointments and provide other requested functionality.
Authentication & SecurityTo authenticate users, enforce access permissions, protect accounts, detect misuse and maintain the security of the platform.
PaymentsTo facilitate and record online payment transactions where payment functionality is used.
Support & ImprovementTo respond to inquiries, troubleshoot problems, maintain reliability, and improve ClinicX performance and functionality.
Legal ComplianceTo comply with applicable laws, regulations, lawful requests and legitimate legal or security requirements.
ClinicX uses reasonable technical and organisational measures designed to protect personal and sensitive information against unauthorised access, alteration, disclosure, loss or destruction.
Secure TransmissionClinicX uses HTTPS and secure communication channels for data transmitted between the application and its services where supported.
Access ControlsAccess to sensitive information is restricted according to user roles and operational responsibilities. Authorised users are responsible for protecting their account credentials.
Service SecurityClinicX relies on established infrastructure and service providers, including Firebase/Google services and payment infrastructure, where enabled, to support secure application functionality.
Although we take reasonable measures to protect information, no method of transmission or electronic storage can be guaranteed to be completely secure.
ClinicX uses selected third-party services to provide core functionality. These services may process information on behalf of ClinicX or directly as independent service providers, according to their own applicable terms and privacy practices.
Firebase / Google ServicesClinicX uses Firebase and related Google services where enabled for application functionality such as authentication, cloud services, data storage, notifications, diagnostics or other technical functions. The specific information processed depends on the Firebase services configured for ClinicX.
RazorpayClinicX uses Razorpay to facilitate online payments where payment functionality is available. Information required to process a payment may be transmitted to Razorpay for transaction processing, security and related payment services.
Other Service ProvidersClinicX may use hosting, infrastructure, support or other technology providers necessary to operate the platform. Such providers are expected to process information only as reasonably necessary for the services they provide and to apply appropriate safeguards.
ClinicX does not sell personal or healthcare information. Information may be disclosed only when reasonably necessary for the purposes described in this policy.
Service ProvidersInformation may be shared with service providers such as Firebase/Google services, Razorpay, hosting or infrastructure providers when necessary to provide ClinicX functionality.
Authorised Clinic UsersPatient and clinic information may be accessible to authorised users within the relevant clinic or organisation according to the permissions and features configured by that organisation.
Legal & Safety RequirementsWe may disclose information when required by applicable law, regulation, legal process or lawful governmental request, or when necessary to protect the security, rights, property or safety of ClinicX, its users or others.
Retention PeriodWe retain information for as long as necessary to provide ClinicX services, maintain legitimate business and transaction records, protect security, resolve disputes, and comply with legal or regulatory obligations.
Deletion RequestsUsers may request deletion of their account and associated personal information using the account-deletion process described below. Requests are subject to identity verification and applicable legal, regulatory, security and legitimate retention requirements.
Required RetentionCertain information may need to be retained where required for legal, regulatory, financial-record, fraud-prevention or security purposes. Where information is retained for such purposes, it will be protected and retained only for the required period.
Subject to applicable law and the user's role within a clinic or organisation, you may request:
Access & CorrectionRequest access to or correction of personal information held about you.
DeletionRequest deletion of your account and associated personal information, subject to applicable retention requirements.
Privacy Questions & ComplaintsContact us with concerns about how your information is handled. We will review and respond to requests within a reasonable period.
Requests may require identity verification and may be limited where fulfilling them would conflict with applicable legal, security, contractual or regulatory obligations.
If you have a ClinicX account and want your account and associated personal data deleted, send an email to contact@asajaitsolutions.com with the subject “ClinicX Account Deletion Request”.
VerificationWe may verify your identity and account ownership before processing a deletion request.
What We DeleteAfter a verified request, we will delete or anonymise personal information associated with the account where required and technically feasible.
Information That Must Be RetainedInformation required for legal, regulatory, financial-record, fraud-prevention or security purposes may be retained for the applicable period and securely protected.
If your ClinicX account is managed by a clinic or organisation, some patient or organisation records may also be subject to that organisation's legitimate record-retention responsibilities.
We may update this Privacy Policy to reflect changes in ClinicX, our data practices, third-party services or applicable legal requirements. Updated versions will be published on this page with a revised effective date. We encourage users to review this page periodically.