Privacy Policy

Introduction

At Trisvio, we take patient, guardian, and staff privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our Hospital Management System and related services. By using our services, you consent to the practices described in this policy.

Information We Collect

We collect information you provide directly and data needed to operate the platform:

• Account Information: Name, email address, authentication data, and role
• Hospital Information: Hospital name, department, and administrative contact details
• Patient and Guardian Data: Records entered by hospitals such as demographics, encounters, diagnoses, prescriptions, lab results, and billing history
• Payment Information: Billing details processed through secure payment providers (we do not store full card numbers)
• Usage Data: Feature usage, configuration settings, and interactions required to support hospital workflows

We also collect certain technical data automatically:

• Technical Data: IP address, browser, device identifiers, and cookies
• Security and Performance Data: Logs and telemetry to keep sessions secure and reliable
• Integration Data: Information exchanged with third-party systems you connect (e.g., lab analyzers or other systems your hospital connects)

How We Use Your Information

We use the collected information for the following purposes:

• Providing and improving our services
• Processing transactions and sending service notifications
• Personalizing dashboards and optimizing hospital workflows
• Analyzing usage patterns to enhance platform functionality
• Communicating about updates, features, and service changes
• Ensuring platform security and preventing fraud
• Complying with legal obligations and enforcing our terms

Patient data is sensitive personal data. We process patient and guardian data strictly under the direction of the hospital, which acts as the data fiduciary/controller for that data; Trisvio acts as a data processor on the hospital's behalf.

Data Storage and Security

We implement industry-standard security measures to protect your information:

• Encryption: Sensitive identifiers are encrypted at rest with AES-256-GCM, and every deployment is required to use TLS for data in transit
• Access Controls: Strict role-based access controls and authentication requirements
• Security Baseline: Security controls are documented against the OWASP Top 10
• Data Backups: Database backup and restore are scripted, and a test restore is required before go-live and quarterly thereafter
• Monitoring: A health check reports database, migration and backup status, and connecting it to alerting is required before go-live

Trisvio is a cloud service. Every Trisvio deployment is required to host the application, its database and file storage in an Indian cloud region. We retain your information only for as long as necessary to provide our services or comply with legal obligations.

Data Sharing and Third Parties

We may share your information with:

• Service Providers: Infrastructure, payment processors, and analytics providers
• Integration Partners: Third-party services you choose to connect with (e.g., lab analyzer interfaces)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We require all third parties to respect the security of your data and treat it in accordance with applicable laws. We do not sell your personal information to third parties.

Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request access to your personal data
• Correction: Update or correct your information
• Deletion: Request deletion of your data (subject to legal requirements)
• Portability: Receive your data in a structured, common format
• Opt-out: Control marketing communications and certain data processing

To exercise these rights or ask questions about our privacy practices, contact us at privacy@trisvio.com. Patient data requests are handled in coordination with your hospital administrator, as the hospital remains the data fiduciary/controller for that data.

Cookie Policy

We use cookies and similar tracking technologies to improve your experience:

• Essential Cookies: Required for platform functionality
• Analytics Cookies: Help us understand usage patterns
• Preference Cookies: Remember your settings and choices
• Marketing Cookies: Support our marketing efforts (with consent)

You can control cookie preferences through your browser settings.

For more detailed information about the cookies we use and how we manage them, please read our Cookie Policy

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or for legal reasons. We will notify you of any material changes through our platform or via email. Your continued use of our services after such modifications constitutes acceptance of the updated policy.

Draft — not yet in effect

Governing law: India. Any disputes will be subject to the exclusive jurisdiction of the courts at the location of Trisvio's registered office (to be confirmed at launch).

For questions about this Privacy Policy, please contact us at:

Trisvio
Email: privacy@trisvio.com