Privacy Policy
What MedOrbit collects on this website, why, and what you can ask us to do about it.
Last updated: 31 August 2026
Who this policy covers
MedOrbit is a hospital and clinic management platform built by AI Nexus Innovation Hub Pvt. Ltd., registered in India and Singapore, with its office in Bengaluru, Karnataka, India. This policy covers this website, www.medorbit.ai, and the people who visit it — prospective customers, partners and anyone who contacts us.
It does not cover patient records held inside a hospital's own MedOrbit system. MedOrbit is software sold to healthcare facilities. We do not treat patients and we have no clinical relationship with you. Where a hospital, clinic or diagnostic centre uses MedOrbit to hold patient data, that facility decides what is collected and why — it is the Data Fiduciary under the Digital Personal Data Protection Act, 2023, and we act as its Data Processor under contract. If you are a patient asking about your records, the facility that treated you is the right place to ask, and we will support them in answering you.
What we collect on this website
Only what you give us, and a limited amount of usage data:
- What you submit. When you request a demo or contact us, we receive the details you type — typically your name, work email, phone number, organisation and facility type, and anything you write in a free-text field.
- Usage data. Standard web analytics — pages viewed, approximate location derived from IP, referrer, device and browser type. This is collected through Google Analytics via Google Tag Manager, and only after you accept analytics cookies.
- Technical logs. Our infrastructure records request metadata such as IP address and timestamps, which is what lets us keep the service available and investigate abuse.
We do not ask for, and this website has no reason to receive, health information about you. Please do not send patient data through the demo or contact forms.
Why we use it
- To answer your enquiry, arrange a demo and follow up about it.
- To send you information about MedOrbit that is relevant to what you asked about. You can opt out of these at any time.
- To understand which pages are useful, so we can improve the site.
- To keep the service secure and available, and to meet our legal obligations.
Where your data is held
MedOrbit runs in Amazon Web Services' ap-south-1 (Mumbai, India) region, and customer data is hosted in India. Some of the service providers described above may process limited data outside India; where that happens we rely on contractual protections with those providers.
How we protect it
Access to production systems is restricted and audited. Data is encrypted in transit, and sensitive fields are encrypted at rest. Tenant separation is enforced in the database itself rather than only in application code, so one customer's data is not reachable from another's session. Our security page describes the controls in more detail, including the human-approval gates on every AI agent.
No system is perfectly secure, and we will not claim otherwise. If you believe you have found a vulnerability, please write to hello@medorbit.ai.
Your rights under the DPDP Act, 2023
For the data this website holds about you, you may ask us to:
- Tell you what we hold and how it has been processed.
- Correct or complete anything inaccurate.
- Erase it, where we have no continuing need or legal obligation to keep it.
- Withdraw a consent you previously gave — this does not undo processing already carried out.
- Nominate someone to exercise these rights if you are unable to.
Write to hello@medorbit.ai and mark it "DPDP request". If you are not satisfied with our response, you may complain to the Data Protection Board of India.
If your request concerns patient records held by a hospital using MedOrbit, please address it to that hospital — see "Who this policy covers" above.
Contacting us
Grievance contact: hello@medorbit.ai. AI Nexus Innovation Hub Pvt. Ltd., Bengaluru, Karnataka, India. We aim to acknowledge data-protection requests promptly and to resolve them within the period the DPDP Act allows.
We may update this policy. When we do, the date at the top changes and the current version always lives at this address.
