Privacy Policy

Effective Date: 23 February 2023 | Last Updated: 20 August 2026

1. Introduction

Exadatum Software Services Private Limited ("Exadatum", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website exadatum.com or use our services.

By accessing our website or using our services, you consent to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us, including:

• Name and contact details (email address, phone number, mailing address)
• Company name and job title
• Billing and payment information
• Account credentials
• Communications you send to us

2.2 Information Collected Automatically

This website collects nothing automatically. It is a static site with no analytics, no tracking scripts and no embedded third-party services. We do not build a profile of your visit, and we cannot see which pages you read.

As with any website, our hosting and content-delivery provider processes standard network request data — including IP address and user agent — in order to serve the page and to protect the service from abuse. We use this only for delivery and security, and we do not use it to identify you.

2.3 Cookies

This website does not set cookies. See our Cookie Policy for the full position.

3. Our Mobile Applications

Sections 2.1–2.3 describe this website. Our mobile applications (published on the App Store and Google Play) are a different product and process the following additional categories of data. We set them out separately here so that what we declare to Apple and Google matches this policy exactly.

3.1 Health and Clinical Information

Some customers use our platform to run a clinic or healthcare practice. On their instructions, the app processes appointment records, patient contact details and the clinical notes their staff enter.

For this data, Exadatum is a processor, not the controller. The clinic decides what is collected and why; we hold and process it on their behalf under our agreement with them. If you are a patient of such a clinic and want your records accessed, corrected or deleted, contact the clinic directly — they are the party who can decide that. We will support them in acting on your request.

Health information is encrypted in transit and at rest, is available only to the clinic's own authorised staff, and is deleted when the clinic deletes the record or closes its account. We do not sell it, we do not use it for advertising, and we do not use it to train models.

3.2 Biometric Authentication

The app can be locked with Face ID, Touch ID or a fingerprint. If you turn this on, the check is performed entirely by your device's operating system, which returns only a yes-or-no answer to the app.

Your biometric data never leaves your device. We do not receive it, transmit it, or store it — on your device or on our servers. We could not access it if we wanted to; iOS and Android do not expose it to applications. Turning the feature off in the app's settings stops the prompt, and your device's own settings control the biometric itself.

3.3 Device Identifiers and Push Notifications

If you allow notifications, the app registers a push token issued by Apple (APNs) or Google (FCM) and stores it against your account so that we can deliver notifications to that device. The token identifies the app installation, not you personally, and we use it only to send notifications you have opted into.

The token is deleted when you sign out. The app removes it from our servers as part of signing out, and the corresponding delivery endpoint is deleted with it. You can also stop notifications at any time in your device settings, and tokens are removed when the associated account is deleted. If you want a token removed for any other reason, contact us at legal@exadatum.com.

Uninstalling the app without signing out first stops delivery, but the operating system does not tell us the app was removed — so in that case the stored token is cleared when the account is deleted, or on request.

4. How We Use Your Information

We use the collected information for the following purposes:

• To provide, operate, and maintain our services
• To process transactions and send related information
• To respond to your inquiries and provide customer support
• To send administrative information, updates, and security alerts
• To personalize your experience and deliver relevant content
• To analyze usage patterns and improve our website and services
• To detect, prevent, and address technical issues or fraudulent activity
• To comply with legal obligations

5. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With third-party vendors who assist us in providing our services
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Legal Requirements: When required by law or to protect our rights
• With Your Consent: When you have given us explicit permission

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access controls and authentication mechanisms
• Employee training on data protection

However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. When data is no longer needed, it will be securely deleted or anonymized.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Objection: Object to certain processing of your information
• Portability: Request transfer of your data to another service
• Withdrawal of Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us at legal@exadatum.com.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

10. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it promptly.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically.

13. Grievance Officer

Under India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, you may raise any concern about how we handle your personal data with our Grievance Officer. We will acknowledge your complaint and respond within the timeframes the law requires.

Grievance Officer
Exadatum Software Services Private Limited
C1003, 33 Keshavkunj, Near Old Orbis School, Keshavnagar,
Manjri Road, Mundhwa, Pune, Maharashtra 411036, India
Email: legal@exadatum.com

If you are not satisfied with our response, you may escalate the matter to the Data Protection Board of India.

14. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: