Privacy Policy

This Privacy Policy explains how PrimeStack Technologies (“PrimeStack”, “we”, “us”, “our”) collects, uses, discloses and safeguards personal data when you visit our website, request a demo, contact us, or when your hospital uses the PrimeStack hospital management platform (the “Platform”).

01Who we are

PrimeStack Technologies builds and operates PrimeStack, a voice-first hospital management platform for Indian healthcare providers covering OPD, IPD, laboratory, operation theatre, pharmacy and billing on a single patient record. You can reach us at hello@primestack.co.in.

02Scope of this policy

This policy applies to (a) visitors to this website, (b) people who contact us or request a demonstration, and (c) authorised users of the Platform at customer hospitals. It does not govern the practices of any third-party website, hospital, or service that we do not operate.

03Information we collect

Information you give us

• Contact and demo enquiries - your name, work email, phone number, hospital or organisation, role, and any message you send us.
• Correspondence - records of your communications with our team.

Information created when a hospital uses the Platform

• Account data for authorised users - name, role, department, login credentials and access logs.
• Clinical and operational records entered by the hospital, which may include patient personal and health data. This is processed strictly on the hospital’s behalf (Section 5).

Information collected automatically

• Technical and usage data - device and browser type, IP address, pages viewed, and diagnostic logs used to keep the service secure and reliable.

04How we use information

We use personal data to provide, operate, secure and improve the Platform and our website; to respond to enquiries and provide support; to administer accounts; to prevent fraud and abuse; and to comply with our legal obligations. We do not sell personal data.

05Patient & clinical data

Patient and clinical records held on the Platform belong to and are controlled by the hospital that uses PrimeStack (the data fiduciary). We process such data only as a data processor, on the hospital’s documented instructions and under our agreement with that hospital - for example to host, display, back up and support the service. We do not use patient data for our own purposes.

If you are a patient and wish to access, correct or delete your health records, please contact the hospital that treated you; they are responsible for those records. We will assist our hospital customers in responding to such requests.

06Legal basis & consent

We process personal data on the lawful bases available under the Digital Personal Data Protection Act, 2023 and other applicable Indian law - including your consent, the performance of a contract, our legitimate interests in running and securing the service, and compliance with law. Where we rely on consent, you may withdraw it at any time by contacting us.

07Sharing & disclosure

• Service providers who help us run the Platform (for example cloud hosting and infrastructure), bound by confidentiality and data-protection obligations.
• The hospital customer, for data generated by that hospital’s use of the Platform.
• Legal and safety - where required by law, court order, or to protect rights, safety and security.
• Business transfers - in connection with a merger, acquisition or reorganisation, subject to this policy.

08Sub-processors & hosting

The Platform is hosted on reputable cloud infrastructure. We engage a limited set of sub-processors to deliver the service and require each to protect personal data to standards consistent with this policy. A current list of sub-processors is available to hospital customers on request.

09Data security

We apply administrative, technical and organisational measures appropriate to the sensitivity of the data - including encryption in transit, role-based access controls, authentication, audit logging and regular backups. No method of transmission or storage is completely secure, but we work to protect data against unauthorised access, loss and misuse.

10Data retention

We retain personal data for as long as needed to provide the service, to comply with legal, tax and regulatory obligations, and to resolve disputes. Clinical records are retained and deleted in accordance with our agreement with the relevant hospital and applicable medical-records regulations.

11Your rights

Subject to applicable law, you may request to access, correct, update or erase your personal data, and to withdraw consent. To exercise these rights or to raise a grievance, contact our Grievance Officer at hello@primestack.co.in. We will respond within the timelines required by law. Patients should direct requests about their health records to their hospital (Section 5).

12Cookies & analytics

Our website uses only essential cookies and privacy-respecting measurement needed to operate the site and understand aggregate usage. You can control cookies through your browser settings; disabling them may affect some features.

13Children’s data

Our website is intended for healthcare professionals and is not directed at children. Where the Platform holds records of minor patients, that data is entered and controlled by the hospital as data fiduciary, with consent obtained by the hospital as required by law.

14Data transfers

We store and process personal data on infrastructure located in India. If any transfer outside India becomes necessary, we will carry it out in accordance with applicable law and with appropriate safeguards in place.

15Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above and, where changes are significant, take reasonable steps to notify you.

16Contact us

Questions, requests or grievances about this policy or your personal data? Write to us at hello@primestack.co.in and we’ll be glad to help.