Service Agreement

1Parties and how you accept

This Agreement is between Mousham Ahmed Laskar, sole proprietor, trading as AuraScale OS (also QuantumPixel), GSTIN 19BDYPL9210K1ZR, UDYAM WB-18-0186128, FC42+FVC, Kandarpapur, Garia, West Bengal 700084 (“AuraScale”, “we”), and the nursing home or clinic whose owner accepts it (the “Facility”, “you”).

2Services

Access to AuraScale OS for your Facility: patient registration with permanent patient ID and ID-card scan, OPD / IPD / emergency admissions, ward and bed map, stock (supplies such as oxygen cylinders, reduced automatically when charged to a bed), charges, interim and final bills, payments and receipts, WhatsApp messages to patients who agreed, staff logins with roles and an activity log, daily and monthly owner reports, in English, Bengali and Hindi. Up to 1,000 WhatsApp messages and 300 ID-card scans per month are included.

We may improve or change features, but will not remove a core feature without 30 days’ notice. The software is a record-keeping and billing tool, not medical advice.

3Fees and payment

• ₹4,999 per month, including GST (taxable value ₹4,236.44 + GST ₹762.56: CGST and SGST in West Bengal, IGST elsewhere), after a 7-day free trial.
• Paid monthly in advance by UPI using the QR code on the Subscription page (or through Cashfree where offered). Each payment extends your plan by one month and produces a GST tax invoice (SAC 998315).
• ID-scan top-up packs: ₹499 including GST for 100 scans that never expire.
• After the renewal date there is a 5-day grace period; then the owner and reception portals are paused until payment. Doctors can still view patient records, and no data is deleted for non-payment.
• Price changes are announced at least 30 days ahead. Refunds follow the Refund & Cancellation Policy.

4Your responsibilities

• Keep logins private, give each staff member their own login, and remove access when someone leaves.
• Enter accurate details, and record WhatsApp permission only when the patient or guardian agreed.
• Use the service only lawfully, and keep the records the law requires of you.

5Support

ceo@aurascale.in · +91 80174 65987, 10:00–19:00 Monday to Saturday except public holidays. We reply within 1 working day, or within 4 working hours if you cannot register patients or bill. Planned maintenance is announced 24 hours ahead. We aim for continuous availability but cannot promise 100% uptime.

6Ending the Agreement and your data

• You may cancel at any time by email or phone; access continues until the end of the month you have paid for. We may end the Agreement with 30 days’ notice, or at once if you seriously break it and do not fix it within 15 days of notice.
• Within 30 days after the end, on request, we give you a full export of your patient data and bills (CSV and PDF).
• 60 days after the end we delete your data from AuraScale, except what the law requires us to keep (such as our GST invoices); backups are overwritten within a further 30 days. You remain responsible for keeping medical and billing records for the period the law requires of you (for example, at least 3 years for in-patient records). On written request before the 60 days end, we keep a read-only archive for an agreed period.

7Confidentiality, liability and law

• Each side keeps the other’s business information and all patient data confidential, unless the law requires disclosure.
• You own your data; AuraScale owns the software.
• Neither side is liable for indirect losses. To the extent the law allows, our total liability is limited to the fees you paid in the three months before the claim, except for a data breach caused by our wilful misconduct or gross negligence.
• Indian law applies; the courts at Kolkata, West Bengal have jurisdiction. Notices are given by email: to ceo@aurascale.in, and to the owner email in the portal.
• A new version of this Agreement applies only after the owner accepts it in the portal.

8Schedule A: Data Processing Addendum (DPDP Act, 2023)

You are the Data Fiduciary for patient data; AuraScale is your Data Processor.

• Data and purpose: patients’, guardians’ and staff details, ID-card details and image, admissions, beds, doctors, diagnosis notes, charges, stock used, payments and WhatsApp permission, used only to run AuraScale OS for you. Stored with Supabase in Singapore.
• Our duties: process only on your instructions; never sell or advertise; limit access; keep reasonable security safeguards (HTTPS, encrypted storage, separation between Facilities, role-based logins, backups, an activity log kept at least one year); message patients only after they tap “Yes”; use only the sub-processors in our Privacy Policy and tell you 15 days before any change; help you answer patients’ requests within 7 days of your request, and forward any request sent to us within 2 working days.
• Breaches: we tell you without delay and within 24 hours, with what happened, what data and how many people are affected, what we did, and a contact; we help you inform affected patients without delay and the Data Protection Board with a detailed report within 72 hours; we report cyber security incidents to CERT-In within 6 hours.
• Your duties: give patients a notice (you may use our notice for patients) and obtain consent or rely on another lawful ground; get a parent’s or guardian’s consent for patients under 18; publish a contact for patients’ data requests and reply within 90 days.
• Audit: on request, once a year, we share a summary of our safeguards. The DPDP Rules, 2025 were notified on 14 November 2025 and most duties apply from 14 May 2027; we follow them now and will update this Schedule if they change.

9Contact