Draft, to be reviewed by a lawyer before launch.

Privacy policy

Last updated: 6 November 2026

This policy explains what personal data AEVORA LABS ("we") collects, why, and what you can do about it. It covers our website, aevoralabs.in, and our product, Smart Clinic, an AI receptionist that clinics use on WhatsApp. We follow India's Digital Personal Data Protection Act, 2023 (DPDP Act).

1. Who is responsible

• Website and demo requests: AEVORA LABS decides what is collected and why.
• Smart Clinic patient data: the clinic you message decides how its patients' data is used. AEVORA LABS processes that data on the clinic's behalf, only to run the service for that clinic.

We are based in , India.

2. What we collect

On this website (when you fill in the demo form): your name, clinic name, phone number, city and your message. We don't use advertising trackers.

Clinic staff using Smart Clinic: the clinic's name, address, hours and doctors, and the details staff enter in the dashboard.

Patients who message a clinic using Smart Clinic:

• Name and WhatsApp phone number
• The chat messages you send and the replies
• Your appointments (doctor, date, time, status) and the reminders sent to you
• Your consent and when you gave it

We don't ask for medical records. Please don't send them in the chat: the assistant can't use them, and the clinic will guide you at your visit.

3. Why we use it

• To book, move and cancel appointments, and send reminders and follow-ups for the clinic.
• To answer basic questions about the clinic (timings, address, fees, doctors).
• To pass medical questions, emergencies and complaints to the clinic's staff.
• To reply to demo requests sent through this website.

We don't sell personal data, and we don't use patient chats for advertising.

4. Consent

Before any patient details are kept, Smart Clinic tells the patient what is saved and why, and asks them to reply YES. Patients can withdraw consent at any time by asking the clinic, or by sending "delete my data" in the chat.

5. Who else processes the data

To run the service we use a small number of providers:

• AI providers (currently Google Gemini, with Groq as a backup) read chat messages to write replies.
• Hosting and database providers store the service and its data.
• WhatsApp (Meta) carries the messages between patients and the clinic.
• Web3Forms delivers demo requests from this website to our email.

Each provider handles data under its own terms, only to provide its service to us.

6. Where it is stored

Data is stored with our cloud database provider, currently in . Some providers may process data outside India, as the DPDP Act allows except for countries restricted by the Government of India.

7. How long we keep it

• Patient data is kept while the clinic uses Smart Clinic, unless the patient asks for deletion earlier.
• When a clinic stops using the service, we delete its patients' data after giving the clinic a chance to export its appointment records.
• Demo requests are kept for up to 12 months, then deleted.

8. Deleting your data

Patients can send "delete my data" in the chat. Their messages are deleted and their name and phone number are removed. Appointment records stay without the patient's identity, so the clinic's statistics still add up. You can also email us (section 9).

9. Your rights and how to reach us

Under the DPDP Act you can ask to see the personal data we hold about you, correct it, have it erased, and withdraw consent. You can also nominate someone to act for you. Send requests and complaints to hello@aevoralabs.in. If you're a patient, you can also contact your clinic. If you're not satisfied with our answer, you can complain to the Data Protection Board of India.

10. Security

Data is sent over encrypted connections, and the clinic dashboard is password protected. No system is perfectly secure. If a breach affects your data, we'll inform you and the authorities as the law requires.

11. Children

Smart Clinic is meant for adults. A parent or guardian should book appointments for children.

12. Changes

We'll update this page when our practices change, and show the date at the top.