Privacy Policy

This policy explains how SmartPilot Innovations Private Limited handles personal data when you visit our website or use SmartPilot. It is written with India's Digital Personal Data Protection Act, 2023 and the Information Technology Rules in mind.

• For account, billing and website data, SmartPilot decides how the data is used.
• For patient data, the clinic or hospital decides how it is used. SmartPilot processes it on the clinic's behalf and only on its instructions. Patients should contact their clinic first about their records.

• Account details: name, email, phone number, role, organisation and branch.
• Clinic data entered by staff: patient registration details, appointments, clinical notes, prescriptions, lab results, bills and documents.
• Billing details for your SmartPilot subscription. Card and bank details are handled by the payment provider, not stored by us.
• Usage information: sign-ins, actions recorded in audit logs, device and browser details.
• Messages you send us, such as demo requests or support emails.

• To provide, secure and support SmartPilot.
• To send service emails such as sign-in links, appointment updates and receipts on the clinic's behalf.
• To manage subscriptions and invoices.
• To improve the product using aggregated usage information.
• To meet legal obligations.

We do not sell personal data, and we do not use patient data for advertising.

• Service providers that host and run SmartPilot, deliver email and messages, and process payments.
• Payment gateways and messaging services the clinic chooses to connect.
• AI service providers, only when someone uses an AI feature, and limited to what that task needs. Business insights use computed figures without patient names.
• Authorities, when required by law.

We keep data while the account is active and as needed to meet legal, tax and medical-record requirements. When a clinic closes its account, we delete or return its data after a reasonable period unless we must keep it by law.

We use access controls so each organisation sees only its own data, role-based permissions for staff, and audit logs of important actions. No system is completely secure, so please tell us at once if you notice anything unusual.

You may ask to access, correct or erase your personal data, withdraw consent where it was the basis for use, nominate someone to act for you, and raise a grievance. Patients should usually contact their clinic, which controls their records; we will help the clinic respond. Email hello@smartpilot.in to make a request.

We use essential cookies and browser storage to keep you signed in and remember your preferences. We do not use advertising cookies.

SmartPilot accounts are for adults working in healthcare. Clinics recording data about children must obtain consent from a parent or guardian as required by law.

We may update this policy and will post the new version here. For important changes we will notify account owners.

• SmartPilot Innovations Private Limited
• Address: Rangunibandha Street, 2nd Lane, Utkal Hall, Brahmapur, Ganjam, Odisha – 760002, India
• Email: hello@smartpilot.in
• Phone: +91 76838 14688
• Grievance Officer: Nisanta Kumar Mahapatro, CEO, SmartPilot Innovations Private Limited