1 Who We Are
Abhram is a product of Abhram. We provide an AI-native operating system for dental clinics, including tools for patient record management, dental charting, appointment tracking, billing and financial reports, inventory management, AI clinical summaries (Abhram Intelligence), and patient-facing document sharing.
We act as a data processor on behalf of the dental clinics (data controllers) that use our platform. We process patient and clinic data solely to deliver and improve the services you have subscribed to.
2 Information We Collect
We collect the following categories of information:
person Account & Clinic Information
Name, email address, phone number, clinic name, clinic location, and login credentials provided during registration and setup.
medical_information Patient & Clinical Data
Patient names, contact details, date of birth, medical and dental history, diagnoses, treatment plans, prescriptions, visit notes, dental charting records (odontograms), uploaded documents (X-rays, PDFs), and billing information. This data is entered by clinic staff and belongs to the clinic.
payments Payment Information
Subscription billing details and transaction records. Payment processing is handled through third-party payment gateways; we do not store raw card details.
devices Usage & Technical Data
IP address, device type, browser, pages visited, session duration, and audit logs of actions performed on clinical and financial records.
3 How We Use Your Information
- check_circle Service Delivery: To operate the platform, manage patient records, schedule appointments, process billing, and generate clinical summaries.
- check_circle Communication: To send system notifications, billing updates, and support responses.
- check_circle Platform Improvement: To analyse usage patterns and develop new features.
- check_circle Legal Compliance: To meet obligations under Indian law, including the Digital Personal Data Protection (DPDP) Act, 2023.
- check_circle Security & Fraud Prevention: To detect and prevent unauthorised access, abuse, and fraudulent activity.
4 Legal Basis for Processing
We process personal information on the following legal bases:
- check_circle Consent: Where you or your patients have provided explicit consent for data processing.
- check_circle Contractual Necessity: Processing required to provide the services you have subscribed to.
- check_circle Legal Obligations: To comply with applicable Indian laws and regulations.
- check_circle Legitimate Interests: To improve the platform, ensure security, and operate our business.
5 Data Sharing and Disclosure
We do not sell or trade your data. We may share data only in the following circumstances:
- check_circle Service Providers: Cloud infrastructure (AWS), AI services (OpenAI), SMS providers (Twilio), and payment gateways — all bound by confidentiality obligations.
- check_circle Legal Authorities: When required by law, court order, or government authority.
- check_circle Business Transfers: In the event of a merger, acquisition, or asset sale, data may be transferred with appropriate safeguards.
- check_circle Internal Access: Only authorised Abhram personnel with a need-to-know basis.
6 Data Security
We implement multiple layers of security to protect clinical and personal data:
- check_circle TLS 1.2+ encryption for all data in transit.
- check_circle AES-256 encryption for data at rest.
- check_circle Automated encrypted backups to AWS S3 with restricted IAM access.
- check_circle Full audit logging of all clinical and financial record mutations.
- check_circle JWT-based session authentication stored in secure, httpOnly cookies.
- check_circle Regular security reviews and vulnerability assessments.
Despite these measures, no system can guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials.
7 Data Retention
We retain your data for as long as your account is active and as required to fulfil our legal obligations. Upon account termination, you may request an export of your clinic data within 30 days. After this period, data will be securely deleted or anonymised in accordance with applicable regulations.
8 Your Rights
Under the Digital Personal Data Protection (DPDP) Act, 2023 and other applicable regulations, you have the following rights:
- check_circle Access: Request a copy of the personal data we hold about you or your clinic.
- check_circle Correction: Update or correct inaccurate information.
- check_circle Deletion: Request deletion of your data, subject to legal retention requirements.
- check_circle Withdraw Consent: Withdraw consent at any time, though this may affect platform functionality.
To exercise any of these rights, please contact us at contactus@Abhram.in.
9 Third-Party Integrations
Abhram integrates with third-party services including cloud storage providers, AI engines, and SMS gateways. These services have their own independent privacy policies. We recommend reviewing their policies when applicable. Abhram Healthcare Solutions is not responsible for the data practices of third-party providers.
10 Children's Privacy
Abhram is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has created an account, we will delete that account promptly. Patient records for minor patients are managed solely by the clinic as the data controller.
11 Cookies and Tracking
We use secure, httpOnly session cookies for authentication purposes. We do not use advertising trackers or third-party marketing cookies. Basic analytics may be collected to monitor platform performance and improve user experience.
12 Confidentiality
We do not sell, rent, or misuse your personal or patient information. Data stored on Abhram is accessible only to authorised personnel under strict access controls. All communications from us are related to the delivery and maintenance of the services you have subscribed to.
13 Changes to This Policy
We may update this Privacy Policy periodically. Changes will be posted on this page with a revised date. Continued use of the platform after updates are posted constitutes your acceptance of the revised policy.
14 Grievance Redressal
If you have concerns about how your data is handled, please contact us. We are committed to resolving all privacy-related concerns in a timely and transparent manner. If you are not satisfied with our response, you may escalate your concern to the relevant data protection authority under Indian law.
15 Governing Law
This Privacy Policy is governed by the laws of India. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts in Kerala, India.
Contact Us
For privacy-related questions, data requests, or concerns, please reach out to us directly.
mail contactus@Abhram.in