Privacy Policy | AuraScale OS

1Who this policy covers

This policy explains what information AuraScale OS (“AuraScale”, “we”) collects, why, and how it is protected. It covers staff who use the AuraScale OS software, and visitors to aurascale.in.

Patient information: a nursing home or clinic decides what patient information it records and why. AuraScale processes that information on behalf of the Facility, only to run the service. Patients who have questions about their records should first contact the Facility they visited.

2What we collect

Account details of Facility staff: name, email, phone number, role and the Facility’s name.
Patient and admission records that Facility staff enter: name, phone number, date of birth, gender, address, bed and admission details, charges and bills, notes, and uploaded documents such as ID-card photos, bills and reports.
Payment status of subscriptions and top-ups. Payments are handled by Cashfree Payments, so we receive order and payment references and the result, but not your card, UPI or bank details.
Basic technical information needed to keep the service running and secure, such as sign-in activity and an audit trail of important actions.
Website enquiries: the demo request form on aurascale.in opens your own email app with the details you typed, and they reach us only if you press send. The website does not save form entries on a server.

3ID cards and government ID numbers

When staff photograph a patient’s ID card, the image is read by AI to pre-fill name, date of birth, gender, address and, where printed, a phone number. AuraScale does not read or store Aadhaar numbers from the photo.

Staff may type an ID number into an optional field. We advise Facilities not to record Aadhaar numbers unless they are legally allowed to, and each Facility is responsible for following the rules that apply to it.

4How we use information

to provide, secure and support AuraScale OS;
to manage subscriptions, top-ups and billing;
to answer questions and fix problems;
to meet legal obligations.

We do not sell personal information, and we do not use it for advertising.

5Outside providers that help us

We use a small number of trusted providers. Each receives only what it needs to do its job:

Supabase: our database, sign-in system and private file storage.
Cashfree Payments: processing subscription and top-up payments.
Anthropic: reading text from ID-card photos.

Some of these providers process information on servers outside India. They handle it under their own terms and privacy commitments.

6ID photos and scans

A photo used for an ID scan is sent to the provider above, which returns the text to the screen. The scanning step itself does not keep the image. If staff choose to save the ID photo, or upload another document such as a bill, it is stored in the Facility’s private file storage.

7Who can see information

Information is separated by Facility, and inside a Facility each staff member sees only what their role allows. We do not share personal information with anyone else except the providers above or when the law requires it, for example in response to a valid legal order.

8Security

We protect information with measures such as encrypted connections (HTTPS), separate access for each Facility and role, and an audit trail of important actions. No online service can promise perfect security, so we also ask Facilities to keep passwords private and to remove access for staff who leave.

9How long we keep information

We keep information while the Facility’s account is active. When an account is frozen for non-payment, its data is kept and not deleted. A Facility can ask us to export or delete its data. We may need to keep some records for as long as the law requires, for example billing and tax records.

10Your rights

Under India’s Digital Personal Data Protection Act, 2023 and other applicable laws, you may ask to see the information held about you, to correct it, to have it erased, to withdraw consent, and to complain about how it is handled.

For patient records, please start with the Facility you visited, because it holds and controls your record. We will help the Facility respond. You can also write to us directly at ceo@aurascale.in.

11Children

Patient records can include children, entered by the Facility with the consent of a parent or guardian. AuraScale does not collect information directly from children.

12Cookies and website tracking

The AuraScale website does not use advertising or analytics cookies. It loads fonts from Google Fonts and shows an embedded Google Map, which are served by Google and may receive your IP address and browser details. The AuraScale OS software keeps you signed in using your browser’s storage.

13Changes to this policy

We may update this policy from time to time. The date at the top shows the latest version. If a change is significant, we will tell Facility owners.

14Grievance contact

For any privacy concern or complaint, write to the Grievance Officer, AuraScale OS, FC42+FVC, Kandarpapur, Garia, West Bengal 700084, India
Email: ceo@aurascale.in · Phone: +91 80174 65987