Privacy Policy

1. Who we are

StirAI ("StirAI", "we", "us") builds AI products and automation for healthcare, education, real estate and other businesses. We are based in Bhubaneswar, Odisha, India. This policy explains how we collect, use and protect personal data through this website and our products, including ClausRX and HIMS.

2. Information we collect

Through this website: when you fill in the demo form we collect your name, work email, mobile number, company, industry and the message you write. When you email or call us we keep that conversation. Our hosting and font providers may log technical data such as your IP address and browser type.

Through our products, on behalf of our clients: hospitals, clinics, colleges and businesses that use our products may store their own users' data with us, for example patient names, phone numbers, UHIDs, appointments, prescriptions and medical history, or student and fee records. We process this data only for that client and only as they instruct.

3. How we use information

• To respond to your enquiry and arrange a demo.
• To provide, run, support and improve the products our clients use.
• To send service messages, such as appointment confirmations or reminders, when a client has set them up.
• To keep our services secure and to meet legal obligations.

We do not sell personal data, and we do not use patient or health data for advertising.

4. Health and sensitive data

Health information is sensitive. When our products handle it, the hospital or clinic decides what is collected and why, and we act on their instructions. Access is limited to people who need it to provide or support the service. Clinical decisions always stay with qualified healthcare professionals; AI output, such as a transcribed prescription line, is shown to the doctor to confirm or correct.

5. Sharing with others

We share data only when needed to run the service, for example with hosting providers, messaging services such as WhatsApp Business used to send confirmations, and payment or email providers. We may also disclose data when required by law or to protect rights and safety. These providers may only use the data to provide their service to us.

6. How long we keep data

We keep website enquiries for as long as needed to respond and follow up, and then delete or anonymise them. Data stored in our products is kept for as long as the client's agreement requires, or as needed to meet legal and medical record-keeping obligations, and then deleted or returned to the client.

7. Security

We use reasonable technical and organisational measures to protect data against loss, misuse and unauthorised access, in line with the Information Technology Act, 2000 and related rules. No system is completely secure, so if we become aware of a breach that affects you, we will inform you and the relevant authorities as the law requires.

8. Your rights

Under India's Digital Personal Data Protection Act, 2023, you can ask to access, correct or erase your personal data, withdraw consent you have given, and raise a grievance. If your data was collected by a hospital, college or business that uses our products, please contact them first; we will help them respond to your request.

To make a request or a complaint, email cto@stirai.in. We aim to respond within a reasonable time and as required by law.

9. Children

This website is not meant for children. Where our products process data about children, for example students or young patients, the institution using the product is responsible for obtaining any consent required from a parent or guardian.

10. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed. Significant changes will be highlighted on this website.