Legal

Privacy Policy

Last Updated: August 14, 2026

EHRPro is a product of Nivzen Onlyne Deals LLP, known as Nivzen Technologies. This Privacy Policy explains how we collect, use, store, and protect information when you visit ehrpro.in, create an account, purchase a license, or use EHRPro software.

1. Scope and three types of information

Please read this policy carefully. It distinguishes between:

A. Website and account information — collected when you browse ehrpro.in, submit forms, sign up for the customer portal, or contact us.
B. Clinical and clinic information in EHRPro software — patient records, prescriptions, billing, and other data entered by your clinic in the Windows desktop application.
C. Payment information — processed by our payment provider (currently Razorpay) when you pay online. We do not store full card numbers, CVV, or UPI PINs on our servers.

2. Who we are

For the purposes of this policy, the data controller for website and account information is Nivzen Onlyne Deals LLP (operating as Nivzen Technologies), GSTIN 24AATFN3030G1ZE.

Nivzen Onlyne Deals LLP (Nivzen Technologies)
GSTIN: 24AATFN3030G1ZE
Registered address: D-1202 Malabar County 3, Tragad Road, Behind Nirma University, Ahmedabad, Gujarat - 382481, India
Business address: Nivzen Technologies, 110 - 1st Floor, Ganesh Glory, Jagatpur Road, Gota, Ahmedabad - 382481, Gujarat, India
Email: support@ehrpro.in
Phone: +91 8733930330
Contact page: https://ehrpro.in/contact

3. EHRPro software and patient data (Category B)

EHRPro is designed as an offline-first Windows desktop application for clinics and small hospitals. After activation, core clinical workflows can run locally on your facility PC.

Patient records, prescriptions, billing entries, and other clinical data entered in the software are stored in a local database on the device where EHRPro is installed. We do not operate a multi-tenant cloud EHR that stores your day-to-day patient records on our servers.

You, as the clinic or facility, remain responsible for:

Lawful collection and use of patient information under applicable Indian law and professional guidelines.
Physical and logical security of the PC where EHRPro is installed.
Regular backups using the software’s backup tools or your own procedures.
Access control for staff users within your organization.

We cannot recover clinical data from your local machine if it is lost, damaged, or encrypted without a backup you maintain.

4. Information we collect on the website (Category A)

Depending on how you interact with us, we may collect:

Trial and account information: when you sign up for a free trial or customer portal account, we may collect your name, email address, phone number, clinic or facility name, and login credentials (passwords stored in hashed form).
Identity and contact details: name, clinic or hospital name, email address, phone number, city, and messages you send via contact, demo, or support forms.
Account information: portal login email, password (stored in hashed form), license keys associated with your account, and support ticket content.
Billing and invoicing details: billing name, GSTIN (if provided), billing address, invoice history, and payment status — for tax invoices and license fulfillment.
Technical and usage information: IP address, browser type, device type, pages viewed, referral URLs, timestamps, and similar log data when you use the website or customer portal.
Cookies and similar technologies: session cookies, preference cookies, and analytics cookies as described in Section 8.

5. Payment information (Category C)

When you pay online through Razorpay or another integrated payment gateway, payment card, UPI, net banking, or wallet details are entered on the payment provider’s secure pages or checkout flow. Those details are processed by the payment provider under its own terms and privacy policy.

We may receive from the payment provider: transaction ID, payment status, amount paid, payment method type (for example, UPI or card), and limited billing metadata needed to issue invoices and activate or renew your license. We do not receive or store your full card number, CVV, or UPI PIN.

6. How we use information

We use Category A and billing-related information to:

Operate the website, customer portal, and support channels.
Create and manage accounts, licenses, trial keys, and renewals.
Process orders, generate GST invoices, and respond to billing queries.
Send service-related communications (activation, renewal reminders, security notices).
Respond to enquiries, demos, and support requests.
Improve website performance, troubleshoot errors, and understand usage trends.
Comply with legal, tax, and regulatory obligations.
Enforce our Terms, Refund Policy, and EULA.

7. Legal bases and customer responsibilities

We process personal information as needed to perform our contract with you (license purchase and support), with your consent where required (for example, marketing communications if you opt in), and where necessary for legitimate business interests or legal compliance.

When you submit information about patients or staff into EHRPro, you are responsible for having an appropriate legal basis and for informing individuals as required by applicable law.

8. Cookies and analytics

Our website may use cookies and similar technologies to maintain sessions, remember preferences, protect forms, and measure traffic. You can configure your browser to refuse cookies; some features may not work correctly if cookies are disabled.

We may use analytics tools to understand how visitors use the website. Analytics data is generally aggregated and does not include patient records from the desktop software.

9. Third-party services

We use trusted service providers where necessary, such as:

Payment processors (for example, Razorpay).
Email delivery services for transactional messages.
Hosting and infrastructure providers for the website and portal.
Security services such as CAPTCHA on public forms.

These providers process information only as needed to perform their services. Our website may also link to third-party sites; we are not responsible for their privacy practices.

10. Data storage, retention, and deletion

Website and account data is stored on servers used to operate ehrpro.in and the customer portal, with access restricted to authorized personnel and service providers under confidentiality obligations.

We retain personal information for as long as needed to provide services, meet legal and tax requirements (including invoice records), resolve disputes, and enforce agreements. When data is no longer required, we take reasonable steps to delete or anonymize it.

To request access, correction, or deletion of website or account information we hold, contact us at support@ehrpro.in. We will respond within a reasonable timeframe. Deletion may be limited where we must retain records for legal or accounting purposes.

11. Security

We implement reasonable administrative, technical, and organizational measures to protect website and account information. No method of transmission or storage is completely secure; we cannot guarantee absolute security of information sent over the internet.

Security of clinical data in the desktop software depends significantly on your own device security, backups, and user access controls.

12. Security incidents

If we become aware of a security incident affecting website or account data under our control, we will investigate and take appropriate steps, which may include notifying affected customers where required by law or where necessary to protect your interests.

13. Children’s privacy

The website and EHRPro are intended for use by clinics, hospitals, and adults acting in a professional capacity. We do not knowingly collect personal information from children under 18 through the website. If you believe a child has provided us personal information, please contact us.

14. Changes to this policy

We may update this Privacy Policy from time to time. The “Last Updated” date at the top will change when we do. Material changes may also be noted on the website home page or communicated to registered customers where appropriate.