Privacy Policy

Effective 21 October 2026

Who we are

Adozta Softech Private Limited operates adozta.com and the Ado Q, AdoBill and Ado Care products. This policy covers website enquiries, account and subscription administration, support and operation of these services. For personal information supplied by a customer organisation, that organisation generally determines why it is collected and how it is used; we process it to provide the agreed service and follow authorised instructions.

Information we handle

We handle contact and organisation details, account identifiers, staff roles, support correspondence, billing details, tax identifiers and subscription transaction references. Product records depend on the selected service and can include appointments, visits, patient or client profiles, clinical records and uploaded documents, prescriptions, inventory, supplier requests and operational invoices. Patient app users may also supply their own personal health records. Technical information includes security logs, device/browser information and the cookies or storage needed to sign in and remember preferences.

How information is used

We use information to provide the requested software and services, administer accounts and subscriptions, respond to enquiries, provide support, maintain security, prevent misuse, troubleshoot failures and meet legal obligations. Optional communications and integrations operate only where configured and authorised. We do not sell personal information or use patient records for advertising. Do not put passwords, payment-card details or full medical records in a general enquiry form.

Customer, staff, patient and supplier access

Customer administrators manage staff roles and access. Patient access to organisation records requires the appropriate verified link and authorisation; having the same email address is not by itself permission to access someone else’s chart. Invited suppliers see their own requests and supply history for each connected organisation, not confidential patient records. Public kiosk, queue and waiting-room views are separate from staff-managed records. Protect private links and report unintended access promptly.

Service providers and payments

We use providers necessary to operate the service, including Hostinger for the company website, AWS for hosted application infrastructure, and Zoho services for business email, bookings and subscription payments. A payment provider receives the information needed to process an authorised transaction under its own terms and privacy policy. We retain transaction references and billing records; do not send payment credentials to support. Other integrations require their own configuration and applicable provider terms. No integration or recurring charge is enabled solely by reading this policy.

Cookies and external services

Essential cookies and browser storage support authentication, request security and preferences. Embedded booking tools or other third-party content may process device information and use their own cookies. Optional analytics and marketing technologies, where present, are subject to the choices shown on the relevant website. Ado Q’s separate website explains its own analytics configuration in its linked policy. Blocking essential storage may prevent sign-in or forms from working.

Retention and deletion

Retention depends on the service purpose, customer instructions, account status, applicable record-keeping duties, security investigations and disputes. Trial expiry or cancellation does not automatically erase records. Supported in-app deleted records are recoverable for 30 elapsed days; that recovery deadline does not authorise permanent removal of underlying clinical, payment or audit history. Verified closure or erasure requests are reviewed for scope and lawful exceptions, including backups and records that must be retained. There is no universal automatic purge date for every type of record.

Security and processing locations

We use measures such as HTTPS, password hashing, access controls and request/session protections. No service can guarantee absolute security. Data processing locations depend on the product, deployment and providers; confirm any residency, data-processing agreement or regulated healthcare requirements with us before production data is uploaded. A demonstration or evaluation workspace must not be treated as an approved production deployment. This policy does not claim HIPAA certification or replace a required agreement.

Your requests and complaints

For access, correction, erasure, consent withdrawal or another applicable privacy request, contact austin@adozta.com. Tell us the product and your relationship to the account, without including unnecessary sensitive information. We may verify your identity and authority. Requests concerning records controlled by a hospital or other customer may be referred to that organisation or handled with its instructions. We respond in accordance with applicable legal time limits and explain the next steps or any lawful exception. You may contact the competent authority where applicable law provides that right.

Children and updates

Business administrator accounts are intended for adults. Healthcare organisations are responsible for the authority and notices required when handling a child’s information. We do not invite children to independently administer an organisation. Material policy changes will be communicated where required. Contact: austin@adozta.com. Business address: No.2, Carmel Nagar, Nagai Road, Katuthottam, Mariammancoil, Thanjavur – 613501, Tamil Nadu, India.