Privacy Policy & Data Safeguards — AltMED Healthcare Technologies

At AltMED Healthcare Technologies, we believe patient trust begins with uncompromising privacy. We operate as a dedicated Data Processor for medical clinics. We never sell, monetize, or harvest patient health data for advertising.

01.Data Roles: Data Controller vs. Data Processor

To clarify legal responsibilities under data protection laws (including the Indian Digital Personal Data Protection Act and international healthcare frameworks):

The Clinic as Data Fiduciary / Controller: Your clinic determines why and how patient health information is collected, maintaining ownership of all patient charts.
AltMED as Data Processor: We process and store clinical records strictly on your behalf and under your clinic’s instructions to deliver the 3D mapping and clinic management software.

02.Categories of Information Collected

We collect and manage only information necessary to deliver clinical operations:

A. Clinic Administrative & Staff Data

Staff names, professional email addresses, telephone numbers, clinical roles (Admin, Doctor, Receptionist), practitioner medical license numbers, and clinic operational working hours.

B. Patient Health & Treatment Records (Entered by Clinic)

Patient full name, contact information, Medical Record Number (MRN), age, gender, medical history notes, vitals (BP, temperature, SpO2), marked 3D acupressure coordinates, session timestamps, and follow-up treatment plans.

C. Technical & Audit Logs

IP addresses, browser type, authentication session tokens, and security event logs to prevent unauthorized access and maintain full clinical auditability.

03.How We Protect Health Information (Technical Safeguards)

AltMED implements industry-standard security measures designed specifically for healthcare applications:

AES-256 Encryption at Rest: All stored database volumes, treatment records, and patient files are encrypted using AES-256 bit encryption keys.
TLS 1.3 Encryption in Transit: All communications between your browser/tablet and our application servers are encrypted using modern Transport Layer Security (TLS 1.3).
Role-Based Access Isolation: Doctors and receptionists access only the records permitted by the clinic’s designated administrator.
Automated Backups & Redundancy: Continuous transactional backups ensure clinical records are resilient against hardware failure or accidental corruption.

04.Cookies & Local Storage Policy

We use cookies strictly for functional and security purposes:

Essential Authentication Cookies: Cryptographically signed session tokens that verify your practitioner login and protect against Cross-Site Request Forgery (CSRF).
UI Preference Storage: Local storage settings that preserve your dark/light theme choices and 3D camera viewer preferences.
Cookie Consent Banner: Non-essential analytics are governed by user consent and can be managed via the cookie banner.

05.Sub-Processors & Third-Party Services

We partner only with security-certified infrastructure providers:

Clerk Inc.: Enterprise identity management, authentication, multi-factor authentication, and organization membership verification.
Cloud Infrastructure Providers: ISO 27001 and SOC 2 Type II certified cloud hosting facilities.

We do not share patient data with marketing agencies, insurers, or data brokers.

06.Data Retention & Permanent Purging

Clinical data is retained for the duration of the clinic’s active service agreement. If a clinic account is decommissioned or terminated:

The clinic is provided a 30-day export window to download all patient directories, invoices, and session histories in CSV / PDF format. Following this window, all patient records and clinic databases are permanently purged from active servers in accordance with medical retention protocols.

07.Data Protection Officer & Privacy Inquiries

For inquiries regarding healthcare data compliance, patient record export requests, or privacy concerns, please contact our Data Protection Officer:

Data Protection Office — AltMED Healthcare

Office Address: R-7/E-67, Raj Nagar, Ghaziabad, Uttar Pradesh (201002)

Privacy Email: support@thealtmed.com

Telephone: +91 84477 18645