Privacy Policy

1. Overview

This Privacy Policy describes how Cliops. All rights reserved by TechnoFuzn Products Pvt. Ltd.(“Cliops”, “we”, “us” or “our”) handles personal information when you visit our website, create an account, or use the Cliopsclinic operating system and its add-ons such as DentoOps (together, the “Services”). By using the Services, you agree to the practices described here.

Because Cliopsis used by clinics to manage their own patients, this policy distinguishes between data we control directly (such as account information) and data we merely process on a clinic’s behalf (such as patient records). Where a clinic uses Cliops, the clinic is responsible for its own privacy notices to patients.

2. Who we are

Cliops is a product of TechnoFuzn. We are the controller of personal data relating to website visitors and account holders. For clinical and patient data entered into the Services by a clinic, the clinic is the controller and Cliopsis the processor, acting only on the clinic’s documented instructions and our data processing terms.

3. Information we collect

We collect the following categories of information:

• Account & contact data — name, work email, phone number, clinic name, role and login credentials (passwords are stored only as salted hashes).
• Billing data — plan, billing contact and transaction records. Card details are handled by our payment processor and are not stored on our servers.
• Usage & device data — pages viewed, features used, approximate location derived from IP, browser type, device identifiers and diagnostic logs.
• Support data — messages, attachments and metadata you share when contacting us.
• Cookies — small files used to keep you signed in, remember preferences and understand aggregate usage (see Section 13).

4. Clinic & patient data

Clinics use the Services to record appointments, follow-ups, patient profiles, diagnoses, prescriptions, investigations and history timelines. This may include health-related information about patients. We treat such data as confidential and process it strictly to provide the Services to the clinic.

• We do not use patient data for advertising and we never sell it.
• We do not access patient data except as needed to operate, secure, troubleshoot or support the Services, or as required by law.
• Each clinic's data is logically scoped and isolated per clinic tenant.
• Clinics are responsible for obtaining any consents and for the lawful basis of the data they enter.

5. How we use information

We use personal information to:

• Provide, maintain and improve the Services and customer support.
• Authenticate users and secure accounts, including fraud and abuse prevention.
• Process payments and manage subscriptions.
• Send service, security and administrative communications.
• Understand usage trends to improve performance and reliability.
• Comply with legal obligations and enforce our terms.

6. Legal bases for processing

Where applicable law (such as the GDPR) requires it, we rely on the following legal bases: performance of a contract (to deliver the Services); legitimate interests (to secure and improve the Services); consent (for certain cookies and marketing, where required); and compliance with legal obligations. For patient data processed on a clinic’s behalf, the clinic determines and is responsible for the lawful basis.

7. How we share information

We share personal information only in these circumstances:

• With service providers (sub-processors) who help us run the Services under contract and confidentiality obligations.
• With a clinic's authorised administrators, for data within that clinic's tenant.
• To comply with law, legal process, or lawful requests from public authorities.
• To protect the rights, safety and security of users, the public, or Cliops.
• In connection with a merger, acquisition or asset sale, subject to this policy.

We do not sell personal information or share it for cross-context behavioural advertising.

8. Service providers (sub-processors)

We use trusted third parties for hosting and infrastructure, database and storage, error monitoring and analytics, email delivery and payment processing. These providers may process personal data only to perform services for us, under appropriate data protection terms. A current list of sub-processors is available on request to support@cliops.in.

9. Data retention

We retain account and website data for as long as your account is active and as needed to provide the Services, then for a limited period to meet legal, accounting and dispute-resolution requirements. Patient and clinical data is retained according to the clinic’s instructions and applicable medical record-keeping laws; on termination, we return or delete clinic data as set out in our agreement, subject to legal retention requirements.

10. Data security

We apply technical and organisational measures designed to protect personal data, including:

• Encryption in transit (TLS) and encryption of data at rest.
• Role-based access control with server-side enforcement and least-privilege access.
• Hashed credentials and short-lived authentication sessions.
• Network isolation, logging, monitoring and regular backups.
• Ongoing review of our security practices and vendor assessments.

No method of transmission or storage is completely secure; we cannot guarantee absolute security, but we work continuously to protect your information and to notify affected parties of incidents as required by law.

11. International data transfers

We may process and store information in countries other than your own. Where we transfer personal data across borders, we use appropriate safeguards such as standard contractual clauses or equivalent mechanisms to ensure an adequate level of protection.

12. Your privacy rights

Depending on where you live, you may have rights to access, correct, update, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent. You may also have the right to lodge a complaint with a supervisory authority.

To exercise your rights regarding data we control, contact us at support@cliops.in. If your request relates to patient data held by a clinic, please contact that clinic, which is the controller of that data; we will support the clinic in responding.

13. Cookies & tracking

We use strictly necessary cookies to operate the Services (for example, to keep you signed in) and, where permitted, analytics cookies to understand and improve usage. You can control cookies through your browser settings; disabling some cookies may affect how the Services function.

14. Children’s privacy

The Services are intended for use by clinics and their staff, not by children. We do not knowingly collect personal data directly from children through the website or account sign-up. Patient records that relate to minors are entered and controlled by clinics in their role as healthcare providers.

15. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Services after an update means you accept the revised policy.

16. Contact us

If you have questions, requests or concerns about this policy or our handling of personal data, contact us: