Privacy Policy

1. Scope of this Policy

This Policy describes how 9Struct and its product teams handle information when you use dirghayu.ai and related public pages (“Site”), and summarizes key practices for the Dirghayu platform (the connected care application and services where you create an account or submit health information)—referred to below as the “Platform”.

When the public application URL is available, the full Platform Privacy Policy will be linked from your account and sign-in flows. Until then, the Platform practices described in Section 5 reflect our commitments.

2. Our commitment

We build Dirghayu to protect privacy and security while improving access to reliable healthcare coordination. We design for alignment with applicable frameworks, including India’s Digital Information Security in Healthcare Act (DISHA) where it applies, the GDPR (European Economic Area), the CCPA/CPRA (California, USA), the DPDP Act (India), and Canadian privacy expectations for health-adjacent services, in each case as applicable to our processing and your location.

We do not sell your personal information. We are not an ad-driven health business: we do not use Google or Meta advertising or consumer-analytics stacks in the Platform’s core flows.

3. The Site (dirghayu.ai) — what we collect

3.1 You send to us

• Email and messages: When you contact support@dirghayu.ai or our parent company, we process your address and message content.
• Interest or waitlist: If we offer forms on the Site, we collect the fields you submit (for example name, organization, email).

3.2 Automatic collection

• Logs: IP address, user agent, approximate location from IP, referrer, timestamps, and resource requests—for security, operations, and improvement.
• Libraries: We load open-source assets (for example Bootstrap) from CDNs. Those providers may process technical data as described in their policies.

The Site is not intended to collect special-category health data; through the Site, do not send detailed medical records unless we ask you to via a secure channel.

4. How we use Site information

We use Section 3 data to operate and secure the Site, respond to you, send updates you request, and comply with law. We do not use Site data for third-party targeted advertising.

5. The Platform — health and account data

When you register and use Dirghayu as a patient, clinician, pharmacy, diagnostic center, or administrator, we process information needed to run the service, including account details, health and clinical data you or your providers enter, usage and audit logs, device and security telemetry, and messages you send—including interactions with Niramaya, our AI assistance layer.

5.1 Purposes

• Provide, secure, and improve the Platform;
• Coordinate care, appointments, prescriptions, diagnostics, and records you authorize;
• Communicate service and health-related notices in line with your preferences and clinical context;
• Support assistive features (including AI) that are constrained by access rules and your organization’s policies;
• Meet legal, regulatory, and professional obligations;
• Detect and prevent fraud, abuse, and security incidents.

5.2 Sharing

We share information only as you direct, as described in the product (for example with your clinic or pharmacy), with service providers under contract and appropriate safeguards, or when required by law. We may use aggregated, de-identified data as permitted by law for analytics and research safeguards consistent with our product disclosures.

5.3 Niramaya and information you choose to enter

Conversations with Niramaya may include symptoms or questions you type. Do not share more personal or health detail than necessary. You are responsible for any sensitive identifiers or information you voluntarily include in chat. Processing of chat content is governed by this Policy, the Platform Privacy Policy where stricter terms apply, and your account settings.

5.4 Others you authorize

When you grant access to another user (for example a provider or family member), they become responsible for their own compliance and handling of that information. Dirghayu facilitates secure sharing according to your instructions but cannot control downstream use once legitimately received by an authorized recipient.

5.5 Security

We apply encryption in transit, access controls, monitoring, and vendor reviews appropriate to health data. No method of storage or transmission is perfectly secure; we commit to continuous improvement and incident response.

6. Your rights

Depending on your region, you may have rights to access, correct, delete, port, restrict, or object to processing, and to withdraw consent where processing is consent-based. You may also lodge a complaint with a supervisory authority. For Platform accounts, use in-app privacy controls where available.

EEA/UK: We identify legal bases (contract, legal obligation, legitimate interests, consent, vital interests) per processing activity. International transfers use appropriate safeguards where required.

California: We do not “sell” or “share” personal information for cross-context behavioral advertising as defined under the CCPA/CPRA. You may exercise access and deletion rights as applicable.

India: We respect rights and duties under applicable Indian privacy and health-data law, including DPDP and DISHA-aligned practices as they come into force for our operations.

Contact: dirghayu@9struct.com or support@dirghayu.ai.

7. Retention

We retain data only as long as needed for the purposes above, including legal, regulatory, backup, and dispute-resolution needs. Account and clinical retention follow product rules and applicable health-record requirements.

8. Children

The Platform is not directed at children under the age required in your jurisdiction to consent. Parental or guardian involvement may be required where local law mandates.

9. Changes

We will update this Policy from time to time and revise the “Last updated” date. Material changes to Platform processing will be communicated through the application or email where appropriate.

10. Governing law and disputes

This Privacy Policy and any dispute, claim, or controversy arising out of or relating to this Policy, the Site, or the Platform shall be governed by the laws of the Province of British Columbia and the federal laws of Canada applicable in British Columbia, without regard to conflict-of-law principles. You irrevocably submit to the exclusive jurisdiction of the courts of British Columbia, Canada.

11. Contact

dirghayu@9struct.com · support@dirghayu.ai