1. Overview
EYENOSIS ("EYENOSIS", "we", "us", "our") provides a multi-tenant cloud CRM platform for eye hospitals and clinics, covering reception, patient registration, clinical examination, OT counselling, surgery, billing, discharge and reporting — accessible on web, Android, iOS and tablet.
This Privacy Policy applies to the EYENOSIS marketing website (eyenosis.com), the hospital CRM application, and our mobile and tablet apps (together, the "Platform"). By using the Platform, you agree to the practices described here.
2. Information we collect
We collect information in three broad categories:
- Hospital & account information — hospital/clinic name, admin contact details, staff accounts, roles and permissions, and subscription/billing details, provided when a hospital registers for EYENOSIS or when staff accounts are created.
- Operational & patient data — patient demographics, appointments, examination findings, prescriptions, OT and surgery records, billing entries, and attachments (reports, photos) that hospital staff enter into the Platform while delivering care.
- Technical & usage data — log-in activity, device and browser information, IP address, and app usage patterns, used to keep the Platform secure and to improve performance.
3. Patient data & hospital responsibility
EYENOSIS is a data processor for all patient and clinical data entered by a hospital. The hospital that registers on EYENOSIS remains the data controller for its patients' records — it decides what patient data is collected, who on its staff can access it, and how long it is retained, using the roles and permissions available inside the Platform.
We process this data only to operate the Platform on the hospital's behalf (storage, backups, display, printing, reporting) and do not use patient data for advertising, nor do we sell patient data to any third party.
4. How we use information
- To provide, maintain and secure the EYENOSIS Platform for each registered hospital.
- To authenticate staff logins and enforce role-based access within a hospital's own workspace.
- To process subscription payments and send related invoices and renewal reminders.
- To send service communications — account, billing, security and support-related emails or notifications.
- To monitor, troubleshoot and improve Platform performance and reliability.
- To comply with applicable law, or to respond to a valid legal request.
5. Sharing & third parties
We do not sell personal or patient data. We share data only with service providers that help us run the Platform, under confidentiality obligations, including:
- Cloud hosting & storage providers, to host the application, database and file/report uploads.
- Payment gateway providers, to process subscription payments securely — EYENOSIS does not store full card or payment credentials.
- Email/SMS/notification providers, to deliver account and service communications.
We may also disclose information if required by law, regulation, legal process, or to protect the rights, property or safety of EYENOSIS, our hospitals, or the public.
6. Data security
We use industry-standard safeguards to protect data on the Platform, including encrypted connections (HTTPS) for data in transit, role-based access control so staff only see what their permissions allow, and regular backups. No method of transmission or storage is 100% secure, but we work to protect data using commercially reasonable means appropriate to a healthcare CRM.
7. Data retention
We retain hospital account data for as long as the hospital's subscription is active, and patient/clinical data for as long as the hospital configures and retains it on the Platform, consistent with applicable medical record-keeping requirements. When a hospital's subscription ends, data may be retained for a reasonable backup/recovery period before deletion, unless a longer period is required by law.
8. Your rights & choices
Hospital administrators can access, correct, export or delete records within their own workspace using the roles and tools available in the Platform. Patients who wish to access, correct, or request removal of their personal data should contact the hospital that treated them, as the hospital controls that data; EYENOSIS supports the hospital in fulfilling such requests. You may also contact us directly using the details in Section 12, and we will route your request appropriately.
9. Cookies & tracking
The EYENOSIS website and application use essential cookies and similar technologies to keep you signed in, remember preferences, and keep the Platform secure (for example, session and CSRF-protection cookies). We do not use these cookies for third-party advertising.
10. Children's privacy
The EYENOSIS Platform is intended for use by hospital staff and administrators, not directly by children. Patient records for minors may be entered by hospital staff as part of clinical care, under the hospital's own consent and data-protection practices.
11. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes to the Platform or applicable law. The "Last updated" date at the top of this page will change when we do. We encourage you to review this page periodically.
12. Contact us
If you have questions about this Privacy Policy or how your data is handled, contact us at superadmin@eyehms.com.