Privacy Policy

SwasthyaGrid is a healthcare quality and compliance platform for India's public health system. Our registered office is in Lucknow, Uttar Pradesh, India. References to 'we', 'us', or 'SwasthyaGrid' in this policy mean the company.

Contact: [email protected] | +1 (347) 920 0949

We collect the following categories of data from users of the SwasthyaGrid platform:

Account data: name, official email address, designation, and employing organisation, provided at registration.

Assessment data: responses to quality framework checkpoints, compliance scores, evidence attachments, and assessor observations entered during the course of using the platform.

Usage data: log entries recording user actions, timestamps, IP addresses, and device type, collected automatically.

We do not collect, store, or process patient health records or personally identifiable patient information of any kind.

We use collected data solely to provide and operate the SwasthyaGrid platform. Specifically:

Account data is used to authenticate users and to associate assessment records with the correct facility, district, and state.

Assessment data is used to generate quality scores, populate dashboards, and produce reports for authorised officers.

Usage data is used to maintain the audit trail required by the platform's compliance function and to diagnose technical issues.

We do not use any data for advertising, profiling, or sale to third parties.

All data is stored on servers located in India on a Meity-empanelled cloud service provider.

No personal or facility data is transferred outside India.

Account data is retained for the duration of the contract and deleted within 30 days of written request following contract termination.

Assessment data is retained for the duration of the contract. On termination, customers may export their full data set before deletion.

Audit logs are retained for a minimum of five years in accordance with applicable government record-keeping requirements.

We do not sell, rent, or share personal data with third parties except in the following limited circumstances:

Service providers: we may share data with infrastructure and technical service providers who process data on our behalf under contractual data processing agreements.

Legal obligation: we may disclose data if required to do so by law or by a valid order of a competent authority.

Under applicable Indian data protection law, you have the right to access the personal data we hold about you, to correct inaccurate data, and to request deletion of your data subject to our retention obligations.

To exercise any of these rights, write to [email protected]. We will respond within 30 days.

The SwasthyaGrid platform uses session cookies strictly necessary for authentication and platform operation. We do not use tracking, advertising, or analytics cookies.

We may update this policy from time to time. Material changes will be communicated to registered users by email at least 14 days before they take effect. The effective date at the top of this page will be updated on each revision.

Questions about this policy should be directed to: [email protected]