Privacy Policy

This Privacy Policy explains how Hayati AI Nexus Pvt. Ltd. (“Hayati”, “we”, “us”) processes personal data in connection with the Hayati AI Nexus marketing website, customer portal, licensing and activation services, and related support communications. It is written for Indian B2B customers evaluating and operating a Healthcare Operations Platform that includes offline-first desktop software and optional cloud services.

We design for operational healthcare retail and care delivery in India. We do not claim certifications or regulatory approvals that we have not obtained. This Policy describes our practices as of the effective date and should be read with our Terms of Service, Cookie Policy, and End User License Agreement.

1. Roles and scope

1.1 Hayati as data fiduciary (typical)

For the public website, sales enquiries, portal accounts, license records, device activation metadata, billing verification metadata for licenses, and support tickets, we typically act as a data fiduciary under applicable Indian law, including the Digital Personal Data Protection Act, 2023 (DPDP) as notified and the Information Technology Act, 2000 and rules thereunder.

1.2 Customer as fiduciary of operational healthcare data

Operational hospital, pharmacy, clinic, and diagnostic records processed in the offline desktop application on infrastructure you control generally remain under your organisation’s responsibility. Hayati does not host those operational databases by default. Optional sync, portal, backup-escrow, or support features may process limited technical or account data as described in your order form or enablement documentation—not as a blanket transfer of patient records to Hayati.

2. Personal data we may process

• Identity and contact data: name, organisation, role, email, phone, WhatsApp handle when you message us
• Enquiry content submitted via forms or email
• Portal account credentials and authentication metadata (including MFA where enabled)
• License, seat, device, branch, edition, and activation records
• Payment verification metadata required to fulfil a license (we do not store full card PANs on marketing pages)
• Support correspondence and delivery logs via email processors
• Analytics identifiers and usage metrics on the marketing site if you accept analytics cookies (see Cookie Policy)
• Optional AI feature inputs/outputs where an AI add-on is enabled on your deployment

3. Purposes

• Respond to enterprise enquiries and schedule walkthroughs
• Issue, activate, renew, transfer, and support software licenses
• Operate the customer portal, device management, and security controls
• Provide product support during published support hours
• Improve marketing-site performance via consented analytics
• Detect abuse, enforce agreements, and comply with law
• Send transactional notices about licenses, payments, and security

4. Legal bases and notices (DPDP-oriented)

We process personal data for legitimate uses connected with providing B2B software and services you request, performing contracts (including license fulfilment), complying with law, and—where required—on the basis of consent (notably analytics cookies and certain marketing communications). Where consent is required, you may withdraw it as described in the Cookie Policy or by contacting us. We do not sell personal data.

5. Cookies and analytics

Essential cookies support security and session integrity. Analytics technologies such as Google Analytics 4 and Microsoft Clarity load only after you accept analytics cookies. Details: Cookie Policy.

6. AI features

Optional AI capabilities (for example receptionist or retention add-ons where entitled) may process prompts and outputs you supply. AI outputs are assistive only, may be inaccurate, and are not clinical decision support. Do not use AI features for diagnosis, treatment, prescribing, or other clinical decisions. Human verification remains required for operationally significant actions. We do not use customer operational healthcare databases to train public models as part of standard licensing unless a separate written agreement says otherwise.

7. Offline desktop, backups, and cloud portal

• Offline desktop: Counter and inventory data typically reside in local databases you administer. You are responsible for access control, backup, and restore discipline (including dual-control restore where the product provides it).
• Cloud portal: Used for licensing, devices, renewals, organisation administration, and optional governed sync policies—not as a forced always-online counter.
• Activation: Machine-bound or entitlement-bound activation may transmit device and license identifiers to Hayati to validate rights.

8. Processors and transfers

We use service providers for hosting, email delivery (for example Resend), analytics (when consented), and related infrastructure. Processing may occur on systems located outside India subject to contractual and legal safeguards as applicable. We require processors to handle personal data only on documented instructions and with appropriate security.

9. Retention, deletion, and export

We retain personal data only as long as needed for the purposes above, license and accounting obligations, dispute handling, and legal retention requirements. You may request access, correction, deletion, or a portable export of personal data we hold as fiduciary by emailing legal@hayatiainexus.com. We may decline or limit requests where law requires continued retention (including legal hold) or where fulfilling the request would impair security or another person’s rights. Deletion of portal accounts does not automatically erase local desktop databases under your control.

10. Security

We apply technical and organisational measures appropriate to B2B software operations, including access controls, transport encryption where applicable, and operational logging. Engineering practices are summarised on /security. No method of transmission or storage is perfectly secure.

11. Children

Our website and portal are directed to business customers, not children. We do not knowingly collect personal data from children for marketing purposes.

12. Changes

We may update this Policy. Material changes will be posted on this page with an updated effective date. Continued use of the site or services after the effective date constitutes notice of the updated Policy where permitted by law.

13. Contact

Hayati AI Nexus Pvt. Ltd.
A-302, Pavan Residency, Near KB Royal Phoenix Cross Road, Chandkheda, Ahmedabad, Gujarat 382424, India
Privacy & legal: legal@hayatiainexus.com
Support: contact@hayatiainexus.com
Sales: sales@hayatiainexus.com
Phone / WhatsApp: +91 9898180987
Hours: Monday–Saturday, 9:00 AM – 9:00 PM IST