Privacy Policy

We collect information you provide directly: account details (name, email, clinic name, medical registration number), clinical audio recordings submitted for transcription, and usage data. We also collect technical data including IP addresses, device identifiers, and browser information through cookies and similar technologies.

Clinical data is processed solely to provide transcription and documentation services. We use account information to manage your subscription, provide support, and send service communications. Aggregated, de-identified data may be used to improve our AI models. We never sell personal or clinical data to third parties.

Patient data is hosted in India. Data is encrypted in transit, and key personal fields are encrypted at rest. ISO 27001 Aligned: information security management following ISO 27001 principles. Certification in progress.

Relaya acts as a data processor for patient health information. You remain the data controller. We process patient data only on your instructions and in accordance with our Data Processing Agreement. Patient data is never used for marketing, advertising, or shared with unrelated third parties.

Account data is retained for the duration of your subscription plus 60 days. Clinical notes are retained as per your configured retention policy (default: indefinite, as required for medical records in India). You may request deletion of your account data at any time.

Under the Digital Personal Data Protection Act, 2023, you have the right to access, correct, and erase your personal data. You may export your data at any time through your account settings. To exercise these rights, contact us at privacy@relaya.one. We will respond within 30 days.

We use third-party services for hosting, payment processing (Razorpay) and, only if you consent, website analytics (PostHog). The current list of sub-processors is on our Data Processing Agreement. All third-party processors are bound by data processing agreements and are prohibited from using your data for their own purposes.

Service providers

IP geolocation by DB-IP (db-ip.com), licensed under CC BY 4.0. We look up your country on our own server; your IP address is not sent to a third party for this.

We use essential cookies for authentication and session management. Analytics cookies are used only with your consent. You may manage cookie preferences through our cookie settings panel. See our Cookie Policy for full details.

We will notify you of material changes to this policy via email at least 14 days before they take effect. The latest version is always available at this URL.

Data Protection Officer: privacy@relaya.one Vansora Studio Private Limited (trading as Relaya) Gurgaon, Haryana, India