Privacy Policy

Last updated: 24 May 2026

This Privacy Policy explains how Aarogentix collects, uses, and protects the data of the hospitals (“tenants”) that use our platform and the patients whose records flow through it.

1. What we collect

• Tenant data: organization name, address, staff user accounts, role assignments, and configuration.
• Clinical data: patient demographics, medical records, prescriptions, lab and radiology results, billing — uploaded by the tenant's own staff into their own tenant.
• Operational telemetry: request logs, error traces, performance metrics (no patient identifiers in telemetry).

2. How we use it

We use tenant + clinical data solely to provide the platform service to that tenant. We do not train models on, sell, or share tenant data. Per-tenant isolation is enforced at every database query.

3. Data residency & encryption

Data is stored in managed Postgres (Neon) with encryption at rest (AES-256) and in transit (TLS 1.2+). Sensitive fields (e.g. insurance identifiers) carry additional AES-256-GCM field-level encryption.

4. Who can access

Only the tenant's authorized staff can access their tenant's data. Aarogentix support staff access tenant data only when (a) the tenant has filed a support ticket requiring it and (b) the access is recorded in our audit log.

5. Retention & deletion

Audit logs are retained for 7 years per HIPAA §164.316(b)(2). Clinical records follow applicable medical-records retention regulations. On account closure, tenants can export their data and request deletion subject to legal-hold and retention obligations.

6. Your rights

Under the DPDPA 2023 (India) and applicable laws, individuals have rights to access, correction, and erasure of their personal data. Requests should be filed via the tenant (the hospital), who is the data fiduciary.

7. Contact

Privacy questions: privacy@aarogentix.com