Clinsnap ("we", "us", "our") provides clinic management software for solo dental and general practice clinics in India, accessible at clinsnap.in and via our mobile app. This policy explains what data we collect, why, and how it's protected.
1. Who this applies to
This policy applies to doctors and clinic staff who create a Clinsnap account ("you"), and describes how we handle data about you and the patient records you enter into the app.
2. What we collect
Account data: Name, email, phone number, clinic name, working hours, profile photo.
Patient data (entered by you): Patient name, contact details, visit notes, appointment history, prescriptions, payment records. This data belongs to you and your clinic — we process it only to provide the app's features.
Usage data: Login activity, AI feature usage count, device information.
Payment data: Processed directly by Razorpay. We do not store your card or UPI details — only subscription status and payment confirmation IDs.
3. Why we collect it
- To provide appointment scheduling, patient records, prescriptions, and billing features
- To send you appointment reminders and OTP verification emails
- To generate AI-assisted patient summaries and insights (only when you use these features)
- To process your DocPro subscription payment
- To secure your account (PIN lock, session management)
4. AI features
When you use AI Patient Summary, Note Polish, or Insights, relevant patient notes and prescription data are sent to Google's Gemini API to generate the response. This data is not used to train Google's models and is not retained by Google beyond generating the response.
5. Where your data is stored
All data is stored on Supabase servers in the Mumbai (ap-south-1) region. Data is encrypted in transit and at rest. PINs are hashed using bcrypt and never stored in plain text.
6. Who has access
Only your clinic's account can access your patient data. We do not share, sell, or allow cross-clinic access to patient records. Clinsnap staff may access data only for support or legal purposes, and never for marketing.
7. Third-party services we use
- Supabase (database and authentication)
- Razorpay (payment processing)
- Resend (transactional emails)
- Google Gemini API (AI features)
- Upstash (rate limiting/security)
Each of these providers processes data only as needed to deliver their service to us and is bound by their own security standards.
8. Data retention
We retain your account and patient data as long as your account is active. If you close your account, we delete your data within 30 days, except where retention is required by law (e.g. financial records for tax purposes).
9. Your rights
You can request a copy of your data, correction of inaccurate data, or deletion of your account and associated data at any time by contacting us. As the clinic owner, you are responsible for obtaining appropriate consent from your patients for storing their records in Clinsnap.
9a. Account deletion
You can permanently delete your Clinsnap account and all associated data (patient records, appointments, prescriptions, notes, payment history) at any time from Profile → Settings → Delete Account, or by emailing docplusafe@gmail.com with a deletion request.
Deletion is permanent and cannot be undone. We complete deletion requests within 30 days. We may retain limited transaction records (such as payment confirmation IDs) for up to 8 years where required by Indian tax law, but this data is not used for any other purpose.
10. Not a medical device
Clinsnap is a record-keeping and practice management tool. It does not diagnose, treat, cure, or prevent any medical condition. AI-generated summaries and insights are aids for the treating doctor and must not be relied upon as clinical advice. Always use professional medical judgment.
11. Security
We use encrypted connections (HTTPS), bcrypt password/PIN hashing, row-level security on all database tables, and rate limiting to protect against abuse.
12. Changes to this policy
We may update this policy from time to time. Material changes will be communicated via email or in-app notice.
13. Contact us
For privacy questions or data requests, contact: docplusafe@gmail.com