Privacy Policy

1. Who we are

NIBRA-CS® is a product of Inovocare Healthsoft Solutions Pvt. Ltd. ("Inovocare", "we", "us"), the manufacturer of the NIBRA-CS® NCS-3.0 autonomic function testing system under CDSCO Licence No. MFG/MD/2025/000789 (Form MD-5, Medical Device Rules, 2017). Our registered and manufacturing address is 377, Purbalok, Mukundapur, Kolkata – 700099, West Bengal, India; we are also incubated at IIM Calcutta Innovation Park, Kolkata. This policy explains how we handle information in three separate contexts — browsing nibracs.com, submitting an institutional enquiry, and a partner institution's clinical use of the NIBRA-CS® device — because our role, and your rights, differ between them.

2. Information we collect

We collect information you voluntarily submit through our Institutional Enquiry form, including your name, organisation, designation, phone number, email address, city, organisation type, and enquiry type. We also receive messages you send us directly via WhatsApp or email.

We do not currently use analytics, advertising, or tracking cookies on this website. Separately, when a healthcare institution operates a NIBRA-CS® device, the device processes patient clinical data as described in Section 5 below — we do not access or collect that data through this website.

3. How we use your information

We use the information you provide through this website to respond to institutional enquiries, schedule product demonstrations, process procurement discussions, and provide ongoing support to hospitals, diagnostic centres, and institutions that use or are evaluating NIBRA-CS®. We do not sell your personal information, and we do not use it for purposes unrelated to these institutional and support functions.

4. Third-party services

Our Institutional Enquiry form is processed by FormSubmit, a third-party form-delivery service, which forwards submissions to our email inbox. We recommend reviewing FormSubmit's own privacy policy for details on how they handle submitted data in transit.

This website also loads fonts from Google Fonts, which may receive your device's IP address when the fonts load, in accordance with Google's own privacy practices.

5. Clinical and patient data (device use)

NIBRA-CS® devices deployed at partner institutions record ECG (Lead II) and non-invasive blood pressure signals during autonomic function testing, together with the patient details entered by the operator — name, age or date of birth, sex, referring doctor, and a system-generated session ID. This data is held temporarily on the device during the test session, then transmitted, once the session is finalised, to our cloud processing platform over encrypted HTTPS/TLS, analysed automatically, and returned as a PDF report to the email address the institution has configured on the device.

Under India's Digital Personal Data Protection Act, 2023 ("DPDPA"), the deploying healthcare institution is the Data Fiduciary for this patient data: it determines why and how the test is performed, and is responsible for obtaining the patient's consent, complying with the DPDPA and other applicable clinical data protection obligations, and handling and sharing the delivered report securely — with the referring physician and authorised clinical personnel only. Inovocare acts as a Data Processor for this data: we process it solely to run the automated analysis and generate the report on the institution's behalf, and our cloud storage of it is limited to the period described in Section 6. We do not use patient clinical data for any other purpose, including marketing.

This is distinct from the enquiry-form data described in Sections 2–4, where Inovocare is the Data Fiduciary, because we collect that information directly for our own purpose of responding to your enquiry.

6. Data retention

Institutional enquiry information is retained for as long as necessary to respond to your enquiry and maintain our business relationship with your institution, or until you ask us to delete it.

Patient clinical data processed via the device is retained on our cloud platform only for the period required for analysis and report delivery; after that, it is deleted unless the deploying institution has arranged a different retention period with us. Contact [email protected] for the specific retention configuration applicable to your institution.

7. Your rights

If you are a website visitor or institutional contact, you may request access to, correction of, or deletion of the personal information you've shared with us by writing to [email protected].

If you are a patient tested on a NIBRA-CS® device, requests to access, correct, or erase your clinical data should first go to the healthcare institution that performed your test, as they are the Data Fiduciary responsible for your clinical record under the DPDPA. You, or your institution on your behalf, also have the right under the DPDPA to withdraw consent, to a grievance redress mechanism, and — in specified circumstances — to nominate another individual to exercise these rights. If a grievance concerning Inovocare's processing role is not resolved to your satisfaction, it may be escalated to the Data Protection Board of India once constituted and operational under the DPDPA.

8. Grievance Officer

In accordance with the Digital Personal Data Protection Act, 2023, we have designated a Grievance Officer to address complaints about how your personal data is processed through this website. Grievances can be addressed to: Rohan Tripathi, Grievance Officer, Inovocare Healthsoft Solutions Pvt. Ltd., [email protected], +91 81002 68525. We aim to acknowledge every grievance within 48 hours and resolve it within 30 days wherever possible.

9. Security

We transmit data between the device and our cloud platform using encrypted HTTPS/TLS protocols. Institutions may request further detail relevant to their own compliance or procurement review by writing to [email protected].

10. Children's data

This website and the Institutional Enquiry form are directed at healthcare professionals and institutional buyers, not children, and we do not knowingly collect personal information from children through them. The NIBRA-CS® device itself is validated only for patients aged 18 and above and weighing 30 kg and above, and is not used on minors.

11. Changes to this policy

We may update this policy from time to time. The "Last updated" date above reflects the most recent revision.

12. Contact

Questions about this policy, or requests relating to your personal information, can be sent to [email protected] or [email protected].