1

Introduction

This Privacy Policy describes how Clinexus Healthcare Edutech Private Limited ("Clinexus", "Platform", "we", "us", "our") collects, uses, processes, stores, and protects personal data of users accessing the Clinexus platform, including its website, applications, services, mentorship modules, marketplace features, and AI tools.

Clinexus acts as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 (DPDP Act).

By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy.

2

Scope of Policy

This Policy applies to:

  • Registered users
  • Mentors and faculty
  • Vendors and partners
  • Visitors interacting with the Platform

It applies only to digital personal data processed by Clinexus.

3

Personal Data We Collect

We may collect the following categories of personal data:

3.1 Identification Information

  • Name
  • Email address
  • Phone number
  • Account credentials

3.2 Professional & Academic

  • Educational qualifications
  • Professional role or specialization
  • Institutional affiliation (if provided)

3.3 Technical & Usage Data

  • IP address
  • Device information
  • Browser type
  • Login timestamps
  • Platform interaction logs

3.4 Transaction Data

  • Payment metadata
  • Subscription details

Payment instruments are processed by third-party gateways and not stored by Clinexus.

3.5 AI Interaction Data

Inputs submitted to AI tools may be processed to generate outputs and improve system performance.

⚠️ Users must not submit patient-identifiable information into AI tools.
4

Lawful Basis for Processing

Personal data is processed based on:

  • User consent
  • Performance of contractual obligations
  • Legitimate uses permitted under the DPDP Act
  • Compliance with legal obligations
  • Protection of platform security and integrity
5

Purpose of Processing

Personal data is used for:

  • Account creation and authentication
  • Providing platform services
  • Mentorship and educational features
  • Payment processing and subscription management
  • Communication and service updates
  • Fraud detection and cybersecurity
  • Analytics and platform improvement
  • Legal and regulatory compliance
🚫 Clinexus does not sell personal data.
6

Consent

Consent is obtained through explicit electronic acceptance during registration or service use.

Users may withdraw consent by contacting the Grievance Officer.

Withdrawal may result in suspension or termination of services where processing is necessary for platform operation.

7

Data Sharing & Disclosure

Personal data may be shared with:

  • Cloud hosting providers
  • Payment processors
  • Analytics and infrastructure vendors
  • Communication service providers
  • Legal or regulatory authorities when required by law

All service providers are bound by confidentiality and data protection obligations.

Clinexus does not control third-party privacy practices.

8

International Data Transfers

Data may be processed or stored outside India in accordance with applicable government notifications and adequate safeguards under the DPDP Act.

9

Data Retention

Personal data is retained only as long as necessary:

  • Account data — while account remains active
  • Transaction records — as required under tax and financial laws
  • Security logs — retained for reasonable fraud prevention periods
  • Legal records — retained where required for dispute resolution or compliance

Data is deleted or anonymized when no longer required.

10

Data Security Measures

Clinexus implements reasonable technical and organizational safeguards including:

  • Access controls
  • Encrypted communications
  • Authentication protections
  • Monitoring for unauthorized access

However, no digital system can guarantee absolute security.

11

Personal Data Breach Response

In the event of a personal data breach:

  • Clinexus will take reasonable steps to contain and investigate the incident
  • Notify competent authorities where legally required
  • Inform affected users when mandated by applicable law
12

User Rights (Data Principal Rights)

Subject to applicable law, users may request:

  • Access to personal data
  • Correction or updating of inaccurate data
  • Deletion of personal data
  • Withdrawal of consent
  • Grievance redressal

Requests may be submitted via the contact details in Section 17.

Identity verification may be required before processing requests.
13

Children's Data

Clinexus is intended for individuals aged 18 years or older.

The Platform does not knowingly collect personal data from minors.

Accounts identified as belonging to minors may be removed.

14

Intermediary Status

Clinexus operates as an intermediary under the Information Technology Act, 2000 and complies with due diligence obligations under the IT Rules, 2021.

Clinexus is not responsible for personal data voluntarily shared by users in public or interactive areas.

15

Limitation of Liability

To the extent permitted by law:

  • Clinexus implements reasonable safeguards but does not guarantee absolute security
  • Clinexus shall not be liable for unauthorized access resulting from events beyond reasonable control, including sophisticated cyberattacks
  • Nothing in this Policy limits liabilities that cannot legally be excluded
16

Updates to This Policy

Clinexus may update this Privacy Policy periodically.

Updated versions will be published on the Platform with a revised "Last Updated" date.

Continued use of the Platform constitutes acceptance of revisions.

17

Grievance Officer & Contact Details

For any privacy-related queries, requests, or grievances, please contact us:

Grievance Officer

Clinexus Healthcare Edutech Private Limited

Address Plot No 5C, Indresham Main Road, Near Indresham Darga,
Above Green Groceries Super Market, Advent Group Building,
Patancheru – 502319, Telangana, India

Grievances will be addressed within timelines prescribed under applicable law.