Privacy & cookie policy.

1. Who we are

This policy is published by Aira Nexus Technologies Pvt. Ltd. (“Aira Nexus”, “we”, “us”), the operator of Aira Nexus Clinic, accessible at clinic.airanexus.in. For the purposes of India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”), we act as the Data Fiduciary for personal data you provide to us through this marketing website and our enquiry, demo and newsletter forms.

When a clinic uses Aira Nexus Clinic to manage its own patients, the clinic is the Data Fiduciary for that patient data and Aira Nexus acts as a Data Processor on its behalf under a separate data-processing agreement. This policy covers the data we collect from you directly as a visitor or prospective customer.

2. What data we collect

We limit collection to what we genuinely need. Depending on how you interact with us, this may include:

• Contact details you submit — name, clinic name, email, phone/WhatsApp number and any message — when you request a demo, ask a question, or subscribe to the newsletter.
• Communication records — the content of emails, WhatsApp and call notes when you contact us, so we can follow up and improve support.
• Technical and usage data — IP address, browser and device type, pages visited and referring source. Most of this is collected only with your consent through analytics cookies (see Section 4).
• Cookie and consent data — your cookie choices and the version and timestamp of that choice, stored in your browser.

We do not knowingly collect patient health records through this website, and we ask you not to send patient-identifiable clinical information over website forms or email.

3. Why we use it and our lawful basis

Under the DPDP Act, we process personal data only for lawful purposes with a clear basis:

• To respond to your enquiry, arrange a demo or trial, and provide support — on the basis of your consent and to take steps at your request before entering into a contract.
• To send the newsletter you signed up for — on the basis of your consent, which you can withdraw via the unsubscribe link in any email.
• To understand and improve how the website performs — on the basis of your consent given through the cookie banner.
• To meet legal, tax and regulatory obligations (for example, retaining GST invoices) — on the basis of a legal obligation.

We do not sell your personal data, and we do not use it for automated decision-making that produces legal or similarly significant effects.

4. Cookies and your consent

A cookie is a small file stored in your browser. We use the smallest set possible and group them into three categories:

• Essential — required for the site to work and to remember your cookie choice. These are always on and do not require consent.
• Analytics — anonymous usage statistics that help us see what is useful. Off by default; loaded only after you opt in.
• Marketing — used to measure campaigns. Off by default; loaded only after you opt in.

When you first visit, a consent banner lets you accept all, reject everything non-essential, or choose per category. No analytics or marketing cookies are set before you opt in. You can change or withdraw your choice at any time using the “Cookie settings” link in the website footer, which re-opens the banner — this is the easy withdrawal mechanism the DPDP Act expects. Withdrawing consent is as straightforward as giving it.

5. Where your data is stored

Your data is hosted in India, in Amazon Web Services’ Mumbai region (ap-south-1). Data is encrypted in transit (TLS 1.3) and at rest (AES-256). Access is restricted on a need-to-know basis with role-based controls and audit logging. Where a third-party processor (for example, an email or WhatsApp messaging provider) is involved in delivering a feature you have requested, we use reputable providers under contractual data-protection terms and share only the minimum data needed.

6. How long we keep it

We keep personal data only for as long as needed for the purpose it was collected, or as required by law:

• Enquiry and demo-request data — up to 24 months from your last contact, unless you ask us to delete it sooner.
• Newsletter subscription data — until you unsubscribe, after which it is removed from the active list.
• Cookie-consent records — up to 12 months, after which the banner re-prompts you.
• Invoicing and tax records — for the period required under Indian tax law.

When data is no longer needed, it is securely deleted or anonymised.

7. Your rights as a Data Principal

Under the DPDP Act, 2023 you have the right to:

• Access — request a summary of the personal data we hold about you and how it is processed.
• Correction and completion — ask us to correct inaccurate or incomplete data.
• Erasure — ask us to delete your personal data where it is no longer required.
• Withdraw consent — withdraw consent at any time (for cookies, via Cookie settings; for the newsletter, via unsubscribe; for anything else, by writing to us). Withdrawal does not affect processing done before withdrawal.
• Grievance redressal — raise a complaint with us, and escalate to the Data Protection Board of India if you are not satisfied.
• Nominate — nominate another individual to exercise your rights in the event of death or incapacity.

To exercise any of these rights, email admin@airanexus.in. We respond to verified requests within a reasonable period and at no charge.

8. Children's data

This website is intended for clinic owners, doctors and staff, not for children. We do not knowingly collect personal data of children through this site. Where our software is used by a clinic to manage a child patient’s records, the clinic obtains and manages parental consent as the Data Fiduciary, in line with the DPDP Act’s provisions on processing children’s data.

9. Security

We take reasonable security safeguards to protect personal data, including encryption, access controls, audit logs and regular review. No system is perfectly secure, but in the event of a personal-data breach affecting you, we will act in accordance with our obligations under the DPDP Act, including notifying the Data Protection Board and affected individuals as required.

10. Changes to this policy

We may update this policy as our service or the law evolves. Material changes will be reflected in the “Last updated” date above, and where a change affects how we use cookies, the consent banner will re-prompt you.

11. How to contact us

For any privacy question, request, or complaint, contact our grievance point of contact:

• Email: admin@airanexus.in
• Phone / WhatsApp: +91 95533 03777
• Aira Nexus Technologies Pvt. Ltd., Hyderabad, India.

See also our Terms of Service.