Privacy Policy & Data Protection

1. Introduction & Scope

Zorayu Private Limited ("we", "our", "us", or "Zorayu") is committed to protecting the privacy, confidentiality, and security of individuals, healthcare professionals, hospital administrators, clinics, and organizations that access our websites, enterprise SaaS portals, and on-premise healthcare software suites.

This Privacy Policy explains how we collect, store, process, transfer, and protect your information in full alignment with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and international data standards including HIPAA and GDPR.

2. Nature of Services: B2B Enterprise Architecture

Zorayu develops and licenses enterprise B2B Hospital Management Systems (HMS), Electronic Medical Records (EMR), Laboratory Information Management Systems (LIMS), Pharmacy POS, and Medical Billing software.

3. Information We Collect

When you interact with our website, request a demonstration, register a customer account, or license our software, we may collect:

• Contact & Organizational Information: Name, professional designation, business email address, mobile number, hospital or clinic name, facility type, bed capacity, city, and state.
• Licensing & Activation Data: Machine fingerprint / Hardware Hash (MAC address, CPU hash), license keys, edition tier, and software activation status to enforce offline licensing integrity.
• Billing & Transaction Records: Transaction reference IDs, invoice details, order summaries, and payment gateway references (via PayU / PayPal). We do not store raw credit/debit card numbers or CVVs.
• Technical Diagnostics: IP address, browser type, operating system version, and anonymous session telemetry used strictly to secure our APIs and prevent fraud.

4. Purpose of Data Processing

We process personal and organizational data for specified, legitimate purposes:

• To schedule, coordinate, and deliver customized software workflow demonstrations.
• To issue, validate, renew, and manage cryptographic software license certificates.
• To process purchase orders, generate statutory B2B tax invoices, and account for GST/TDS compliance.
• To provide customer support, bug fixes, updates, and deployment assistance.
• To prevent unauthorized duplication, license cracking, and cyber threats.

5. Data Protection & Security Practices

Zorayu Private Limited implements robust administrative, physical, and technical safeguards, including 256-bit AES encryption in transit (TLS 1.3) and at rest, strict role-based access control (RBAC), multi-tenant cryptographic isolation, and periodic security reviews.

6. Third-Party Disclosures

We do not sell, rent, or trade your personal or business data to data brokers or advertising networks. We only share information with authorized infrastructure providers necessary to fulfill our services:

• Payment Processors: PayU India and PayPal for encrypted payment settlement.
• Communication Providers: Enterprise transactional SMTP mailers for dispatching license keys, verification OTPs, and invoices.
• Statutory Authorities: When strictly required under applicable Indian laws, judicial orders, or tax compliance (MCA, GSTN, Income Tax).

7. Grievance Redressal Mechanism

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, the details of our designated Grievance Officer are as follows:

8. Updates to this Policy

We may update this Privacy Policy periodically to reflect changes in our legal obligations, software features, or regulatory frameworks. Material revisions will be posted on this page with an updated effective date.