Privacy Policy
Effective: 18 July 2026
Roles and scope
Umami Solutions Pvt. Ltd. operates DXIORA AI. For patient records entered by a subscribing hospital, the hospital generally determines the purpose and lawful basis of processing, while DXIORA provides the software and authorised processing services.
Information processed
DXIORA may process hospital account details, authorised-user details, subscription and payment references, audit logs, support communications and patient clinical information entered by authorised hospital users. Razorpay processes payment information under its own terms; DXIORA stores payment identifiers and verification status, not full card details.
Security and access
The platform uses role-based access, tenant separation, secure sessions, audit logging and encrypted storage of configured integration credentials. Hospitals must maintain strong passwords, remove former staff and report suspected unauthorised access promptly.
Retention and requests
Data is retained according to hospital configuration, contractual requirements and applicable law. Requests relating to patient records should normally be directed to the relevant hospital. DXIORA support can assist authorised hospital administrators with export, correction and approved deletion workflows.