Privacy Policy
Last updated: August 2026
1. Information We Collect
When you use Apointo, we collect information that is necessary to provide our appointment and follow-up platform. This includes practice information (clinic name, doctor details, specialisation), appointment data (patient names, contact numbers, appointment dates and times), follow-up records, and patient journey information. We also collect usage data to improve the platform, including login times, feature usage patterns and device information.
2. Appointment Data
All appointment data entered into Apointo belongs to your practice. We store this data securely on your behalf to deliver the service. Appointment data includes booking details, cancellation records, rescheduling history, consultation notes and follow-up scheduling information. This data is processed solely to provide the Apointo platform functionality you have subscribed to.
3. Patient Information
Patient information stored in Apointo — including names, contact details, visit history and treatment journeys — is owned entirely by your practice. Apointo acts as a data processor on your behalf. We do not use patient information for any purpose other than delivering the platform services* . We do not share, sell or distribute patient data to third parties under any circumstances.
4. Security and Encryption
We implement industry-standard security measures to protect your data. All data in transit is encrypted using TLS 1.3. All data at rest is encrypted using AES-256 encryption. Our infrastructure runs on secure cloud servers with regular security audits, penetration testing and vulnerability scanning. Access to production systems is restricted through multi-factor authentication and role-based access controls.
5. Cookies and Local Storage
Apointo uses essential cookies to maintain your authenticated session and remember your preferences. We do not use third-party tracking cookies or advertising cookies. Local storage is used to cache frequently accessed data (such as your doctor list and calendar view preferences) to improve application performance. You can clear local storage at any time without affecting your account data.
6. Your Rights
You have the right to access all data stored in your Apointo workspace at any time through the platform. You can export your data in standard formats. You can request deletion of specific records or your entire workspace data. You can correct any inaccurate information. You can withdraw consent for data processing, which will result in account closure after data export. To exercise any of these rights, contact us at support@apointo.in.
7. Data Retention
We retain your data for as long as your subscription is active. If you cancel your subscription, your data will be available for export for 30 days after cancellation. After the 30-day export window, all workspace data is permanently and irreversibly deleted from our systems, including backups. We do not retain any patient data, appointment records or practice information after this deletion period.
8. No Data Selling
We do not sell, rent, lease or share your data with third parties for marketing, advertising or any commercial purpose. Your data is used exclusively to deliver the Apointo platform services you have subscribed to. We may share anonymised, aggregated usage statistics (that cannot identify any individual or practice) for the purpose of improving our service and communicating with prospective customers about general platform capabilities.