Privacy Policy

This Privacy Policy explains how PulamAI Tech Private Limited, trading as ClintoBytes (“ClintoBytes”, “we”, “us”) handles personal data when you visit https://clintobytes.health, contact our team, request a demo, submit an enquiry, sign up for a ClintoBytes business account, or communicate with us about our products.

This notice concerns our website, sales, marketing, customer-account administration and business operations. It is not the privacy notice that a hospital should give its patients for clinical care. Where ClintoBytes processes patient or other personal data on behalf of a hospital, the DPA and the hospital’s own notices govern that processing.

Contact: Privacy contact privacy@clintobytes.health; registered office SFNO.603/2,4A, Murungatholuvu, Erode - 638051, Tamil Nadu.

1. Who is responsible?

PulamAI Tech Private Limited, trading as ClintoBytes, determines the purposes and means of processing personal data collected for its own website, enquiry, sales and platform-administration purposes. For this limited activity, it acts in the role assigned to it by applicable data-protection law. For patient data processed on a hospital customer’s instructions, ClintoBytes generally acts as the hospital’s data processor/service provider, as set out in the DPA.

2. Information we collect

Depending on how you interact with us, we may collect:

• Contact and enquiry information: name, work email, telephone number, organisation, role, city/state, clinic or hospital size, product interests, message content and contact preferences.
• Account and subscription information: business name, administrator details, login and authentication records, selected plan, billing contact, invoice details, subscription status and payment-provider references.
• Support and communications: emails, support requests, demo notes, feedback, and records of communications with our team.
• Technical and security information: IP address, timestamps, browser/device information, requested pages, error logs, authentication events, security events and similar service-operational records.
• Payment status: transaction identifiers, amount, currency, status and limited payment metadata returned by our payment provider. We do not intend to store full payment-card credentials.
• Consent and preference records: choices you make about contact, cookies or other optional processing, and the date/source of those choices.

Please do not submit patient records, medical details or other sensitive personal data through a public enquiry form unless we have expressly requested it through a secure and appropriate channel.

3. Purposes and legal basis

We may use the information above to:

• respond to enquiries and demo requests;
• assess product fit and provide quotations;
• create, administer and secure business accounts and subscriptions;
• provision the Service, send operational notices and manage invoices or payments;
• provide customer support, investigate incidents and improve reliability;
• prevent fraud, abuse and unauthorised access;
• maintain business records, enforce contracts and resolve disputes;
• meet legal, tax, accounting and regulatory requirements; and
• send product or marketing communications where permitted and, where required, after obtaining consent.

We will identify and document the applicable lawful basis or permitted ground for each purpose under the data-protection law that applies. Where consent is required, you may withdraw it through the stated channel; withdrawal does not affect processing lawfully completed before withdrawal.

4. Cookies and analytics

The website may use strictly necessary technologies to deliver pages, protect forms, maintain security and remember essential preferences. We do not use advertising or marketing cookies. If we introduce optional analytics or other non-essential technologies, we will update this Policy first and ask for consent where the law requires it.

5. When we disclose information

We may disclose relevant information to:

• hosting, infrastructure, email-delivery, customer-support and security providers;
• payment processors, solely as needed to process payments and reconcile transactions;
• professional advisers, auditors, insurers and legal counsel;
• public authorities, courts or regulators where disclosure is legally required; and
• a successor or transaction counterparty in connection with a corporate reorganisation, merger, financing or asset transfer, subject to appropriate safeguards and law.

Service providers are expected to process information under contractual confidentiality, security and data-protection obligations. We keep a list of these providers and where they process data, and share it where required. A summary is on our Sub-processors page.

We do not sell personal data to advertisers.

6. International processing

Some providers may process data outside India. Where cross-border processing is involved, we will apply the safeguards required by applicable law and the relevant customer contract. We do not promise that all processing takes place only within India.

7. Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including account administration, legal compliance, security, dispute resolution and recordkeeping. Website enquiries are kept for 24 months and then deleted or anonymised.

Account, invoice, security and support records may be retained for different periods where required by law or reasonably needed to administer the Service. Backup copies may persist for a limited period through the normal backup lifecycle. We review our retention periods periodically.

8. Security

We use technical and organisational measures designed to protect information against unauthorised access, loss, alteration or disclosure. The specific measures depend on the system and may include access controls, authentication safeguards, logging, encryption where configured, backups, secure development and incident handling.

No online service can guarantee absolute security.

9. Your choices and rights

Depending on applicable law and the context, you may have rights to request access to, correction of, updating of, erasure of or information about personal data, withdraw consent, raise a grievance, or make a complaint to the appropriate authority.

Send requests to privacy@clintobytes.health. We may need to verify your identity and clarify the data or relationship involved. Some information may be retained where required by law, necessary to establish or defend legal claims, or otherwise permitted by law. If your request concerns patient data held by a hospital in ClintoBytes, we may direct you to that hospital as the responsible data fiduciary/controller and assist it under the DPA.

Grievance contact: Sekar R, +91 70109 38625; grievance@clintobytes.health.

10. Children

The website and business enquiry service are intended for business users and are not designed for children. Do not submit children’s personal data through public enquiry forms. The hospital’s use of the HMS for paediatric care must be governed by the hospital’s lawful instructions, appropriate notices and consent/authorisation processes, and the DPA.

11. Third-party websites

Our website may link to third-party sites or services. Their privacy practices are governed by their own notices, not this Policy.

12. Changes to this Policy

We may update this Policy to reflect changes in our practices, providers, products or applicable law. We will update the version and “Last updated” date and provide additional notice or seek consent where required.

13. Contact

PulamAI Tech Private Limited, trading as ClintoBytes
Privacy contact: privacy@clintobytes.health
Privacy requests may also be sent to grievance@clintobytes.health where they relate to a grievance.
Grievance contact: Sekar R, +91 70109 38625; grievance@clintobytes.health
Registered office: SFNO.603/2,4A, Murungatholuvu, Erode - 638051, Tamil Nadu