Legal · For clinics

Data Processing Terms for Clinics

Version 1 · 21 October 2026 · Part of our Terms and Conditions. How we use personal details ourselves is in our Privacy Policy.

These terms say how Fix My Appointment (run by HYLISH) looks after the patient details your clinic keeps on our platform. Indian law (the Digital Personal Data Protection Act, 2023) asks for a written agreement like this. We will ask a lawyer to review these terms. If that changes anything that matters, we will ask you to agree again.

1. Who decides, and who helps

For your patients' visit records (appointments, vitals, prescriptions, and the patient details you type in), your clinic decides why and how they are used. We process them for you, only to run the service. For patients' own accounts, sign-ups and our website, we decide, as our Privacy Policy explains.

2. What we do with your clinic's data

• We use it only to run Fix My Appointment for you: bookings, records, prescriptions, reminders, invoices and support, and where the law requires.
• We never sell it, and never use it for ads.
• Only our people who need it can see it, and they must keep it secret.

3. How we keep it safe

Our main database is in Mumbai, India. Everything travels encrypted, and Google encrypts what it stores. Each person sees only what their role allows, checked on our servers every time. We keep logs of who opens patient records for one year, so misuse can be found.

4. Services that help us

We use these services, each only for its own job: Google (Firebase and Google Cloud, for the database, logins, files, emails and maps), Google Gemini (our AI assistants), Twilio (SMS and phone calls), Meta (WhatsApp messages) and Razorpay (payments). We will tell you before we add a new one.

5. Patients' requests

If a patient asks us to see, correct or erase a visit record your clinic made, we pass the request to you without delay, and help you answer it.

6. If something goes wrong

If we find a data breach that affects your clinic's data, we tell you without delay, with what we know. We help you tell your patients and the Data Protection Board, and we keep a record of what happened.

7. What your clinic does

• Collect only the patient details you need, and tell patients what you collect and why.
• Keep your logins safe, and give staff only the access they need.
• Use the dashboard only for your own patients.

8. When your clinic leaves

You can download your clinic's records at any time, from Profile → Your clinic's records. If your clinic leaves Fix My Appointment (you press Leave Fix My Appointment, or delete the clinic account), we delete its records 90 days later. Until then you can still download them, or change your mind. We keep your invoices and payments for 8 years from the end of the financial year, as GST law needs, and your signed registration declaration for 3 years.

9. Law and contact

These terms follow the laws of India, including the Digital Personal Data Protection Act, 2023 and its Rules, and the Information Technology Act, 2000. Questions? Write to support@fixmyappointment.com.