Last updated: March 2026 · NexOPD by AppsTechy

1. Acceptance of Terms

By registering for and using NexOPD ("Service"), you agree to be bound by these Terms of Service. If you do not agree, please do not use the Service. These terms apply to all clinic admins, doctors, receptionists, pharmacists, and patients who access the platform.

2. Description of Service

NexOPD is a cloud-based Outpatient Department (OPD) management system that provides clinic management, patient registration, digital prescriptions, pharmacy management, appointment scheduling, and AI-assisted clinical workflows.

3. Account Registration

You must provide accurate and complete information when creating an account. You are responsible for maintaining the confidentiality of your login credentials and for all activities that occur under your account. Notify us immediately at support@nexopd.com of any unauthorized use.

4. Subscription Plans & Payments

NexOPD is offered on a subscription basis with Free, Starter, Growth, and Professional plans. Paid plans are billed monthly via Razorpay. All fees are non-refundable except where required by law. We reserve the right to change pricing with 30 days' notice.

5. Permitted Use

You may use NexOPD solely for lawful purposes related to clinical practice management. You must not:

• Use the service to store or process data beyond your plan's patient limits
• Attempt to reverse-engineer, copy, or clone the platform
• Share login credentials across multiple users
• Use automated tools or scrapers to access the platform
• Upload malicious code or interfere with the platform's operation

6. Intellectual Property

All content, design, code, trademarks, and materials in NexOPD are the exclusive property of AppsTechy. No part of the platform may be reproduced, distributed, or used to create derivative works without prior written consent.

7. Data Ownership

You retain full ownership of all patient and clinic data you input into NexOPD. We process this data solely to provide the Service and do not sell, rent, or share your data with third parties except as required to deliver the Service (e.g., email delivery, payment processing).

8. Limitation of Liability

NexOPD is a clinical workflow tool and does not constitute medical advice. Clinical decisions remain solely the responsibility of licensed healthcare professionals. To the maximum extent permitted by law, AppsTechy shall not be liable for any indirect, incidental, or consequential damages arising from use of the Service.

9. Termination

We reserve the right to suspend or terminate accounts that violate these terms, with or without notice. You may cancel your account at any time from your clinic settings page.

10. Governing Law

These Terms are governed by the laws of India. Disputes shall be subject to the exclusive jurisdiction of courts in Mumbai, Maharashtra.

11. Contact

For questions about these Terms, contact us at legal@nexopd.com or through our support page at nexopd.com/support.

Last updated: March 2026 · NexOPD by AppsTechy

1. Information We Collect

We collect information you provide directly, including:

• Clinic Data: Clinic name, address, specialization, contact details
• Staff Accounts: Names, email addresses, phone numbers, roles
• Patient Records: Names, phone numbers, age, gender, medical history, prescriptions, vitals — stored with field-level AES encryption
• Usage Data: Login timestamps, IP addresses, actions performed (audit logs)
• Payment Data: Processed securely by Razorpay — we do not store card details

2. How We Use Your Information

• To deliver and improve the NexOPD Service
• To send transactional communications (appointment reminders, prescriptions, OTPs)
• To enforce subscription plan limits and features
• To maintain security, prevent fraud, and produce audit trails
• To comply with applicable Indian law including the DPDP Act 2023

3. Data Storage & Security

All patient health information (PHI) is encrypted at rest using AES field-level encryption. Data is stored on servers in India. We implement strict access controls, HTTPS-only communication, and immutable audit logging on all sensitive data access.

4. Data Sharing

We do not sell, rent, or trade your data. We share data only with:

• Razorpay — for payment processing
• Twilio — for WhatsApp OTP and reminders
• Hostinger — for email delivery
• Groq — for AI-assisted clinical summaries (anonymized inputs only)
• Law enforcement, when required by valid legal order

5. Your Rights (DPDP Act 2023)

Under India's Digital Personal Data Protection Act 2023, you have the right to:

• Access your personal data held by us
• Correct inaccurate personal data
• Request erasure of your data (subject to legal retention requirements)
• Withdraw consent for processing
• Nominate a representative for data rights

To exercise these rights, contact us at privacy@nexopd.com.

6. Cookies

NexOPD uses session cookies for authentication and preference storage. We do not use third-party advertising cookies. Google Analytics is used for aggregate usage statistics with IP anonymization enabled.

7. Data Retention

Patient records and audit logs are retained for a minimum of 7 years as required by Indian medical regulations. Account data is deleted within 30 days of account closure upon request.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email to the registered clinic admin at least 15 days before taking effect.

9. Contact

For privacy-related queries: privacy@nexopd.com

Last updated: March 2026 · NexOPD by AppsTechy

1. Protected Health Information (PHI)

NexOPD treats all patient health information as Protected Health Information (PHI), including:

• Patient names, phone numbers, addresses
• Medical history, diagnoses, prescriptions
• Vitals (blood pressure, weight, temperature, etc.)
• Lab results and clinical notes
• Appointment and visit records

2. Technical Safeguards

• Field-Level Encryption: All PHI fields are encrypted at rest using AES encryption before database storage
• Encrypted Transmission: All data transmitted via HTTPS/TLS 1.3 exclusively
• Access Controls: Role-based access control (RBAC) — each user type (Doctor, Receptionist, Pharmacist, Patient) can only access data relevant to their role
• Audit Trails: Every access, creation, update, and deletion of patient records is logged with user identity, IP address, and timestamp — immutable and restricted to authorized admins
• Session Security: Automatic session expiry, CSRF protection, and Strict-Transport-Security headers enforced

3. Administrative Safeguards

• Staff access is provisioned by Clinic Admins and restricted to minimum necessary privilege
• Doctor contact information is hidden from unauthenticated public visitors
• AI-generated clinical content requires explicit clinician review and approval before finalization
• All AI inputs are processed with anonymized context — patient identifiers are not sent to AI providers

4. Physical Safeguards

NexOPD is hosted on enterprise-grade infrastructure with physical security controls, redundant backups, and geographic data residency in India.

5. Patient Rights

• Patients can access their own health records via the Patient Portal
• Patients can download prescriptions and visit summaries
• Data correction and deletion requests can be submitted to the clinic admin or directly to us at privacy@nexopd.com

6. Breach Notification

In the event of a data breach affecting PHI, affected clinics and patients will be notified within 72 hours of discovery, in accordance with DPDP Act 2023 requirements and HIPAA best practices.

7. Business Associate Responsibilities

NexOPD acts as a data processor for clinics (data controllers). We sign data processing agreements with enterprise clients on request. All third-party service providers (Razorpay, Twilio, Groq) are bound by their own GDPR/privacy compliance frameworks.

8. Compliance Queries

For HIPAA or compliance-related questions: compliance@nexopd.com