Privacy policy

Last updated: 30 September 2026

This policy explains how DORA ("we", "us"), run by its founder , handles personal data when you visit this website, sign up for DORA or use it. Our address is .

1. Two different roles

Patient records inside a clinic's DORA. Each clinic decides what it records about its patients and why. For that data the clinic is responsible (the "data fiduciary" under India's Digital Personal Data Protection Act, 2023), and we process it only on the clinic's behalf and on its instructions, to run the service. We do not use patient data for our own purposes. If you are a patient, please contact your clinic about your records; if you contact us, we will pass your request to the clinic.

Information about clinics, their staff and website visitors. For the details you give us when you sign up, the accounts of clinic staff, billing and this website, we decide how the data is used, and the rest of this policy applies.

2. What we collect

• Details you send us: clinic name, your name, mobile number, email, city and state, clinic size, the plan you are interested in and anything you write to us.
• Account details: names, email addresses, roles and sign-in activity of the clinic staff who use DORA.
• Billing details: plan, invoices, payment references and your GSTIN if you give it. Payments are handled by our payment gateway: we never see or store full card numbers, UPI PINs or net banking passwords.
• Technical data: IP address, browser and device type, and the pages requested, in the security logs of our hosting providers.

This website does not use advertising or tracking cookies. The sign-in page remembers the last DORA address you typed, and that stays in your own browser. The site loads its fonts from Google Fonts, so Google receives your IP address when you visit.

3. How we use it

• To answer your enquiry, set up your clinic's DORA and give your team access.
• To bill you, keep tax records and meet our legal obligations.
• To give support, keep the service secure and prevent misuse.
• To tell you about changes to the service. We send other messages only if you agree, and you can stop them at any time.

We do not sell personal data.

4. Who we share it with

Only with companies that help us run DORA — cloud hosting and databases, email, SMS and WhatsApp delivery, and the payment gateway — under contracts that allow them to use the data only to provide their service to us; and with authorities when the law requires it. Some of these providers store or process data in data centres outside India, for example in Singapore.

5. How we protect it

We use reasonable security practices: every connection to DORA is encrypted, each clinic runs in its own separate system with its own database, staff sign in with personal accounts and roles that limit what each person sees, and important actions are logged. No system is perfectly secure; if a breach affects your data, we will inform you and the authorities as the law requires.

6. How long we keep it

We keep account and billing data while your clinic uses DORA, and afterwards for as long as tax and other laws require. Sign-up details that do not lead to an account are deleted within 12 months. What happens to a clinic's data after it leaves DORA is described in our terms of service.

7. Your rights

You can ask us for a summary of the personal data we hold about you, to correct or complete it, to delete it, or to withdraw a consent you gave. You can also nominate someone to exercise these rights for you. Write to ; we respond within one month.

8. Grievance officer

If you have a concern about how we handle personal data, contact our grievance officer, , at . If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

9. Children

This website and DORA accounts are for clinics and their staff, not children. Clinics that record children's data are responsible for getting a parent's or guardian's consent as the law requires.

10. Changes

If we change this policy, we will update the date above, and tell clinics about important changes before they take effect.