Privacy Policy

MediSwift24 is a healthcare management software platform designed to help healthcare facilities manage their day-to-day operations through a centralized digital system.

Our platform may provide functionality including patient management, appointments, consultations, prescriptions, pharmacy management, inventory, laboratory management, billing, reporting, notifications, user management and related healthcare administrative functions.

MediSwift24 is operated from Azad Nagar, Belagavi, Karnataka, India.

For privacy-related questions, contact:

Email: help@mediswift24.com

Depending on how you interact with MediSwift24, we may collect information such as:

A. Information submitted through our website

When you contact us, request a demonstration, request a discovery call or submit a form, we may collect:

• Name
• Email address
• Phone number
• Facility/organization name
• Type of healthcare facility
• City/location
• Information included in your message or enquiry

B. Account information

When a healthcare organization creates an account, we may collect information necessary to create and manage the account, such as:

• Name
• Email address
• Phone number
• Organization/facility information
• Login credentials
• User role and permissions
• Account and subscription information

C. Healthcare information entered by customers

Healthcare organizations using MediSwift24 may enter information into the platform relating to their patients and operations.

Depending on the modules used, this may include:

• Patient name and contact details
• Patient demographic information
• Appointment information
• Consultation information
• Prescription information
• Laboratory information
• Pharmacy information
• Billing and payment-related information
• Medical records or other healthcare-related information entered by authorized users
• Other information necessary for the healthcare facility's use of the platform

MediSwift24 does not ask patients to directly create accounts on the current platform.

Healthcare organizations are responsible for ensuring that they have the appropriate authority, notices and permissions required to collect and process patient information through the platform.

D. Technical information

We may automatically receive limited technical information when users access our website or services, such as:

• IP address
• Browser type
• Device information
• Operating system
• Approximate usage information
• Log information
• Security-related information

We may use information to:

• Provide and operate MediSwift24
• Create and manage customer accounts
• Provide customer support
• Respond to enquiries and requests
• Provide demonstrations and onboarding
• Process subscriptions and service-related transactions
• Maintain and improve the platform
• Monitor performance and security
• Detect and prevent unauthorized access, fraud or misuse
• Maintain audit and operational records
• Communicate important service-related information
• Comply with applicable legal obligations

We do not sell personal information as a product to third parties.

When a clinic, hospital or healthcare organization enters patient information into MediSwift24, the healthcare organization remains responsible for determining why and how that patient information is collected and used.

Customers must ensure that their use of MediSwift24 complies with applicable laws and their own obligations toward patients and other individuals.

Customers should only provide access to patient information to authorized personnel and should use the role and permission controls available within the platform appropriately.

MediSwift24 acts as a technology/service provider for the healthcare organization and processes information as necessary to provide the contracted services.

The exact legal roles and responsibilities of MediSwift24 and each customer may be further defined in the applicable customer agreement and Data Processing Agreement.

We may share information only when reasonably necessary to provide our services, operate our business, protect our systems, comply with legal requirements or perform other legitimate service functions.

This may include sharing information with:

• Infrastructure/cloud service providers
• Hosting and storage providers
• Communication providers such as email/SMS providers
• Payment service providers where applicable
• Security and technology service providers
• Professional advisers where necessary
• Government authorities or law-enforcement agencies where legally required

Third-party service providers are expected to process information only for legitimate purposes related to the services they provide.

We take reasonable technical and organizational measures to protect information from unauthorized access, alteration, disclosure, loss or misuse.

Depending on the system and service involved, security measures may include:

• Role-based access controls
• Authentication and authorization controls
• Audit logging
• Encryption where appropriate
• Secure application practices
• Backup and recovery procedures
• Monitoring and security controls
• Access restrictions

However, no internet-based service can guarantee absolute security.

Users and customers are also responsible for protecting their account credentials and restricting access to authorized personnel.

We retain information only for as long as reasonably necessary for the purposes for which it was collected, to provide services, meet contractual obligations, maintain security, resolve disputes and comply with applicable legal requirements.

For healthcare customers, specific retention periods may depend on the customer's requirements, applicable laws and the customer agreement.

When an account is terminated, customer data may be retained for a limited period for backup, legal, security or operational purposes before deletion or anonymization, subject to applicable obligations.

Where applicable, customers may request export or deletion of their data subject to:

• Applicable law
• Contractual requirements
• Security requirements
• Backup and disaster-recovery retention
• Legal record-keeping obligations

We will implement appropriate procedures for handling valid requests.

Specific customer data deletion and export procedures may be described in the applicable SaaS Agreement or Data Processing Agreement.

Our website may use cookies or similar technologies to:

• Operate the website
• Remember preferences
• Understand website usage
• Improve website performance
• Maintain security

Users may be able to control cookies through their browser settings.

If additional analytics, advertising or tracking technologies are introduced, this Privacy Policy may be updated accordingly.

If you submit your contact details through our website, we may use them to respond to your enquiry, arrange a demonstration, provide onboarding information or communicate about MediSwift24.

We will not use your information for unrelated marketing purposes without an appropriate basis or permission where required by applicable law.

You may contact us to request that we stop promotional communications.

MediSwift24 plans to introduce AI-enabled features in 2027.

AI functionality may be subject to separate product terms, privacy notices, consent requirements, security controls and applicable healthcare/regulatory requirements depending on the specific feature.

MediSwift24 will not represent a future AI feature as medically approved, clinically validated or legally certified unless the applicable approval, validation or certification has actually been obtained.

This Privacy Policy may be updated before or when AI features are introduced.

Our website or platform may contain links to third-party websites or services.

We are not responsible for the privacy practices or content of third-party websites.

Users should review the privacy policies of third-party services before using them.

MediSwift24 is intended for healthcare organizations and professional users.

The website is not intended to be used by children to create accounts or directly subscribe to the service.

Healthcare organizations remain responsible for appropriately handling information relating to minors in accordance with applicable law.

Depending on applicable law, individuals may have rights relating to their personal information, including rights to access, correction, deletion, withdrawal of consent where applicable, grievance redressal and other legally available rights.

Requests relating to patient information should generally be directed first to the healthcare organization responsible for that information.

For privacy-related questions or requests concerning MediSwift24's own processing activities, contact: help@mediswift24.com

For privacy, data protection or grievance-related concerns, contact:

MediSwift24, Azad Nagar, Belagavi, Karnataka, India. Email: help@mediswift24.com

We will review and respond to valid requests within the period required by applicable law.

We may update this Privacy Policy from time to time.

When changes are made, we will update the "Last Updated" date on this page.

Where required, we may provide additional notice regarding significant changes.

For questions about this Privacy Policy:

MediSwift24, Azad Nagar, Belagavi, Karnataka, India. Email: help@mediswift24.com