Privacy Policy

Advayan Technologies Pvt. Ltd. (“we”, “us”, “our”) operates the MyEMR platform — a cloud-based Electronic Medical Records SaaS product. Our registered address is 15152, Prestige Lakeside Habitat, Varthur Main Road, Bangalore, Karnataka 560087. For data protection queries, contact our Data Protection Officer at dpo@myemr.in.

We process personal data: (a) on the instructions of the hospital as Data Fiduciary for care delivery, billing, and ABDM/ABHA integrations; (b) to fulfil contractual obligations; (c) to comply with legal requirements under the IT Act 2000, DPDP Act 2023, and healthcare regulations; (d) for legitimate interests such as platform security and fraud prevention.

We share data only with: (a) the hospital/clinic that is your primary healthcare provider; (b) approved sub-processors (cloud, SMS, analytics) bound by equivalent data protection obligations; (c) government systems (ABDM / NHA) as directed by the hospital; (d) law enforcement where legally required. We do not sell personal data.

We implement AES-256 encryption at rest, TLS 1.2+ in transit, role-based access control, multi-factor authentication, annual penetration testing, and ISO 27001-compliant data centre hosting.

Patient health data is retained per applicable medical regulations (minimum 7 years post-treatment). Platform user account data is retained for the duration of the subscription plus 1 year. Website logs are retained for 90 days.

Under the DPDP Act 2023, you have the right to: (a) access your personal data; (b) correct inaccuracies; (c) withdraw consent (where processing is consent-based); (d) request erasure (subject to legal retention obligations); (e) raise a grievance. Submit requests to your healthcare provider (the Data Fiduciary) or directly to dpo@myemr.in.

Designation: Data Protection Officer · Email: dpo@myemr.in · Phone: +91 62322 85776 · Address: 15152, Prestige Lakeside Habitat, Varthur Main Road, Bangalore, Karnataka 560087. Responses within 30 days.

Our website uses essential cookies (for login sessions), analytics cookies (Google Analytics — anonymised), and no advertising cookies. You may disable non-essential cookies via your browser settings.

We may update this Privacy Policy periodically. Material changes will be notified via email or an in-platform banner at least 30 days before taking effect.