Privacy Policy

Mountiva Group Pvt. Ltd. ("NxaCare", "we", "us") provides healthcare management software to clinics and their teams. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

This policy applies to our website, web application and mobile apps (together, the "Services"). By using the Services you agree to the practices described here.

We collect information in three broad ways:

• Information you provide: account details, clinic information, billing details, and content you enter such as appointments and notes.
• Patient data processed on behalf of clinics: when a clinic uses NxaCare, we process patient records strictly as a data processor under the clinic's instructions.
• Information collected automatically: device and log data, IP address, browser type, and usage analytics to keep the Services secure and reliable.

We use information to provide and improve the Services, authenticate users, process payments, send service communications, prevent fraud and abuse, and comply with legal obligations.

We do not sell your personal information, and we do not use patient data for advertising.

For patient records, the clinic is the data controller and NxaCare is the data processor. We only process patient data to deliver the Services and as instructed by the clinic.

For account and billing data of clinic staff, NxaCare acts as a controller.

We share information only with sub-processors who help us run the Services (such as cloud hosting, payments and messaging providers), each bound by confidentiality and data-protection terms.

We may disclose information where required by law, to protect rights and safety, or as part of a merger or acquisition, in which case we will notify affected users.

We retain information for as long as your account is active or as needed to provide the Services. Clinics control retention of their patient data and may export or request deletion at any time, subject to applicable medical record-keeping laws.

We use encryption in transit and at rest, role-based access controls, and regular backups. No method of transmission or storage is perfectly secure, but we work continuously to protect your data. See our Security page for details.

Depending on your jurisdiction, you may have the right to access, correct, export or delete your personal information, and to object to or restrict certain processing.

To exercise these rights, contact us using the details below. Patients should direct requests to their clinic, which controls their records.

We may update this policy from time to time. We will post the updated version here and, for material changes, notify you through the Services or by email.