Privacy Policy
At SynapseAI, patient privacy and data security are the foundation of our engineering. Our architecture is built from the ground up to comply strictly with the Digital Personal Data Protection (DPDP) Act, 2023, and the guidelines of the National Medical Commission (NMC).
Data Sovereignty & DPDP
- •100% Data Ownership: The Clinic is the sole Data Fiduciary and retains exclusive rights to all records. SynapseAI acts purely as a Data Processor.
- •Localized Storage: All patient data and digitized clinical notes are hosted exclusively on secure servers located in the AWS Mumbai Region.
- •Right to Erasure: Our platform features built-in compliance tools to instantly and permanently delete patient records upon request.
Anti-Brokering Guarantee
- •Zero Data Selling: We legally guarantee that patient data, session notes, and records are never sold, rented, or brokered to any third party.
- •No Targeted Advertising: Patient information is strictly shielded from marketing networks, insurance companies, and advertising algorithms.
- •SaaS Business Model: Our revenue is generated strictly through software licensing, removing any incentive to monetize sensitive patient data.
Enterprise-Grade Security
- •Encryption Standards: Data is secured using bank-level AES-256 encryption at rest and TLS/SSL protocols in transit.
- •Strict Access Control: SynapseAI personnel operate on a strict "zero-standing-access" policy. Database access is highly restricted.
- •Metadata Stripping: When practitioners upload images of notes, SynapseAI automatically ignores device metadata (like GPS location).
Workflow Integrity
- •Human-in-the-Loop: SynapseAI is an assistive tool. Every document requires explicit "Verification" by the practitioner.
- •Paper as Primary: The platform complements existing workflows. Original handwritten notes remain the primary medical record.
- •Continuous Security: Infrastructure updates are deployed daily during our CI/CD maintenance window (8 PM – 12 AM IST).
Protected By Enterprise Infrastructure
Mumbai
Supabase
Google Cloud