Tejas
Privacy Policy

1. Scope and responsibilities

Tejas is designed for authorised hospital personnel and supports integrated outpatient and inpatient administration and clinical workflows. It is not intended for direct public use unless a hospital enables a specific patient-facing feature.

For information entered by a hospital, the hospital generally acts as the data controller or equivalent responsible organisation, while Arthro Studio acts as its technology service provider. Users should contact their hospital first regarding access, correction, or deletion of a hospital record.

2. Information processed

Depending on the hospital's configuration and permitted workflows, Tejas may process:

• Patient identity and contact details, demographic information, identifiers, emergency contacts, and visit history
• Outpatient appointments, consultations, symptoms, diagnoses, prescriptions, investigations, procedures, referrals, and follow-up information
• Inpatient admission, bed and ward details, clinical notes, orders, treatment records, nursing information, discharge summaries, and related care information
• Billing, payment, insurance, service, package, and account information
• Hospital staff profiles, professional details, departments, roles, permissions, schedules, and activity records
• Technical information such as device and browser details, IP address, timestamps, authentication events, audit logs, error records, and service-security data

Each hospital determines which data fields and modules it enables. Users must enter only information required for authorised hospital purposes.

3. How information is used

• Operate integrated OP and IP workflows and maintain continuity across hospital visits
• Register patients, schedule care, document authorised clinical activity, manage admissions and discharges, and support billing
• Authenticate users, apply role-based permissions, maintain audit trails, and protect the service
• Configure Tejas for the hospital's departments, forms, services, pricing, and workflows
• Provide technical support, resolve errors, maintain availability, and improve reliability
• Meet contractual, legal, regulatory, security, and professional obligations

Arthro Studio does not sell patient or hospital information and does not use it for behavioural advertising.

4. Disclosure and service providers

Information is available only to authorised hospital users according to the roles and permissions configured by the hospital. A hospital may also authorise access for its professional advisers, laboratories, pharmacies, insurers, auditors, or other care and operational partners where lawful and necessary.

Arthro Studio may use vetted cloud hosting, database, security, monitoring, backup, communications, and support providers to operate Tejas. These providers process information only as needed to provide their services and under applicable contractual or legal safeguards.

Information may also be disclosed when required by law or legal process, to protect patients or other persons, to investigate misuse or security incidents, or as part of a lawful business reorganisation subject to appropriate safeguards.

5. Data location and international processing

The hospital's deployment configuration determines the primary hosting location where available. Tejas and its service providers may process information in other countries for hosting, security, support, or continuity. Appropriate safeguards will be used where required by applicable law.

6. Retention and deletion

Hospitals determine retention periods for patient, clinical, financial, operational, and staff records according to their legal, medical, professional, and institutional requirements.

Arthro Studio retains hosted information according to the hospital agreement and applicable law. After termination or an authorised deletion request, information may remain temporarily in protected backups, security logs, or records that must be preserved for legal or dispute-resolution purposes until the relevant retention period ends.

7. Security

Tejas uses reasonable technical and organisational safeguards designed for a cloud hospital system, including authenticated access, encrypted network transport, role-based permissions, audit logging, backups, and restricted administrative access where configured.

No system can guarantee absolute security. Hospitals are responsible for managing authorised users, promptly removing unnecessary access, protecting devices and credentials, training staff, and reporting suspected incidents without delay.

8. Individual rights and choices

Depending on applicable law, individuals may have rights to request access, correction, restriction, deletion, or a copy of their personal information, or to object to certain processing. Requests concerning a hospital record should be directed to the hospital that collected it. Arthro Studio will assist the hospital with verified requests where contractually and legally required.

9. Clinical responsibility

Tejas supports hospital workflows and record management. It does not replace professional clinical judgment, patient assessment, institutional policy, emergency procedures, or applicable medical and legal duties. Hospitals and healthcare professionals remain responsible for the accuracy and appropriate use of information entered into the system.

10. Changes to this policy

This Privacy Policy may be updated to reflect changes to Tejas, hospital configurations, service providers, or applicable requirements. The effective date will be revised and additional notice will be provided where required.

11. Contact

For questions about a hospital record, contact the hospital that uses Tejas. For questions about Tejas privacy and security, contact Arthro Studio at draravindravi95@icloud.com.