Patholix

Privacy policy

Last updated 10 October 2026

This policy explains how Patholix ("Patholix", "we", "us") collects, uses and protects personal data when you visit patholix.com or use the Patholix software (the "Service"). It is written in line with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules.

1. The two kinds of data we handle

Account data is information about laboratories and their staff: names, email addresses, phone numbers, business details, payment records and sign-in activity. We decide how this data is used.

Patient data is information a laboratory enters about its patients, such as names, contact details, age, gender, test orders and results. The laboratory decides why and how this data is collected and is responsible for it. We process patient data only to provide the Service to that laboratory, on its instructions.

2. What we collect

  • Details you give when you sign up: lab name, your name, email, mobile number and city.
  • Business details you add: address, registration and GST numbers, logo and letterhead.
  • Payment records: plan, amount, date and the payment reference from the payment gateway. Card, UPI and bank details are entered on the payment gateway's page; we never see or store them.
  • Technical data needed for security: IP address, sign-in times and an audit log of actions in the software.

3. How we use account data

  • To create and run your account and sign you in securely
  • To process payments and issue invoices
  • To send service messages, such as plan expiry reminders and important changes
  • To provide support and fix problems
  • To keep the Service secure and prevent misuse
  • To meet our legal, tax and accounting obligations

We do not sell personal data. We do not use patient data for advertising, analytics of our own, or any purpose other than running the Service for the laboratory.

4. Who we share data with

We share data only with service providers that we need to run the Service, and only as much as they need:

  • Hosting provider, which stores the Service and its data on secure servers.
  • Payment gateways Razorpay and PayPal, which process your subscription payments.
  • Messaging services that deliver WhatsApp, SMS or email messages that a laboratory chooses to send to its patients.

We may disclose data if the law requires it, for example in response to a valid order from a court or government authority.

5. How we protect data

All connections to Patholix are encrypted. Each laboratory's data is kept separate and is visible only to that laboratory's authorised staff. Passwords are stored in a form that cannot be read back, pathologists can turn on two-step sign-in, actions are recorded in an audit log, and backups are taken every day.

6. How long we keep data

We keep account and patient data for as long as the laboratory's account is open. If an account is closed or not renewed for 12 months, we keep the data for a further 90 days so the laboratory can export it, and then delete it, except records we must keep by law, such as invoices.

7. Your rights

You can ask to access, correct or delete your personal data, or withdraw your consent, by emailing hello@patholix.com. We respond within 30 days.

If you are a patient, please contact the laboratory that did your tests, because the laboratory controls your records. We will help the laboratory respond to your request.

8. Cookies

The Patholix software uses one essential cookie to keep you signed in. This website does not use advertising or tracking cookies. It loads fonts from Google Fonts, which receives your IP address to deliver them.

9. Children

The Service is for laboratories and their staff. A laboratory may hold test records of children, and is responsible for having the consent of a parent or guardian as the law requires.

10. Grievance officer

If you have a complaint about how your personal data is handled, contact our grievance officer at hello@patholix.com. We acknowledge complaints within 48 hours and aim to resolve them within 30 days.

11. Changes to this policy

If we change this policy, we will update the date at the top of this page and tell account owners about important changes by email.