Privacy Policy

Effective date: 18 October 2026

This Privacy Policy explains how AIpath DigiNext Private Limited ("AIpath", "we", "us"), the company behind AIpath HealthTech, collects, uses, stores and protects personal data. It is written in line with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000 and the applicable rules, and the data-protection requirements of the Ayushman Bharat Digital Mission (ABDM).

1. Who this policy covers

Website visitors and enquirers. When you use this website, request a demo or contact us, AIpath decides how your personal data is used and acts as the Data Fiduciary.

Patients and staff of our customers. When hospitals, clinics and diagnostic centres use AIpath HealthTech, the healthcare facility decides how patient and staff data is used and is the Data Fiduciary. AIpath processes that data on the facility's behalf, as a Data Processor, under a written agreement and only on the facility's instructions.

2. Data we collect

  • Enquiry data: name, email, phone number, facility name and type, city, bed count, modules of interest and any message you send through our forms.
  • Platform data (processed for facilities): patient demographics, ABHA number where provided, clinical records, prescriptions, diagnostic reports, billing and insurance information, and staff account details.
  • Technical data: access logs, device and browser information and security events, used to operate and protect our services.

3. How we use data

  • To respond to enquiries, arrange demos and provide our services.
  • To operate AIpath HealthTech for healthcare facilities, strictly on their instructions.
  • To keep our services secure, prevent misuse and meet legal obligations.

We do not sell personal data, and we do not use patient data for advertising.

4. Consent and ABDM health information exchange

Health records are shared with other facilities through ABDM only after the patient grants consent in their ABHA application for a specific purpose, set of records, date range and duration. Patients can withdraw consent at any time, after which further access stops. ABHA creation and linking are optional and done only with the patient's consent.

5. Artificial intelligence

AI features assist users with documentation, summaries and insights. AI outputs are reviewed by qualified professionals; the AI does not independently diagnose or prescribe. AI features operate within each user's permissions and the patient's consent.

6. Storage, security and data location

Health data is hosted in Indian cloud regions on Amazon Web Services or Microsoft Azure. Data is encrypted in transit and at rest. Access is restricted through role-based access control and multi-factor authentication, and every access to patient records is logged. Further detail is on our Security page.

7. Sharing

We share personal data only:

  • with the healthcare facility that the data belongs to;
  • through ABDM or NHCX workflows, as authorised by the patient or facility;
  • with infrastructure providers that host our services under confidentiality and security obligations; and
  • where required by law or a lawful order of a competent authority.

8. Retention

Enquiry data is kept for as long as needed to respond and maintain our relationship, then deleted. Platform data is retained as instructed by the healthcare facility and as required by applicable medical-records laws, and is securely deleted or returned at the end of the engagement.

9. Your rights

Under the DPDP Act you may, subject to applicable law:

  • access a summary of your personal data and how it is processed;
  • request correction, completion, updating or erasure of your personal data;
  • withdraw consent where processing is based on consent;
  • nominate another person to exercise your rights; and
  • raise a grievance with us, and escalate to the Data Protection Board of India.

If your data is held by a hospital using AIpath HealthTech, please contact that hospital first; we will support them in responding to your request.

10. Cookies and local storage

This website does not use advertising or tracking cookies. The staff portal stores a sign-in token in your browser only to keep you signed in.

11. Children

Data of children is processed only through healthcare facilities, with verifiable consent of a parent or lawful guardian as required by law.

12. Grievance Officer

For privacy questions, requests or complaints, contact our Grievance Officer:

Anuj Kumar Singh
Grievance Officer, AIpath DigiNext Private Limited
Email: contact@aipathdiginext.com
Phone: +91 91256 58344

We acknowledge grievances promptly and resolve them within the timelines required by applicable law.

13. Changes to this policy

We may update this policy from time to time. The effective date above shows when it was last changed. For any questions, write to contact@aipathdiginext.com.