Social Clinik · Last updated 24 September 2026
Privacy policy
01Who we are
Social Clinik is a social media publishing tool for hospitals, operated by Codiste Private Limited, whose registered office is at Ganesh Glory, 805–807, Sarkhej–Gandhinagar Highway, Gota, Ahmedabad, Gujarat 382481, India. In this policy, “we” and “us” mean Codiste Private Limited, and “you” means a person who uses Social Clinik or whose information reaches it.
For everything a hospital puts into Social Clinik — its website content, its staff, its posts, its photographs — the hospital decides what happens to that information, and we act on its instructions. In the language of data protection law, the hospital is the controller and we are its processor. For the accounts of the people who sign in, and for this website, we are the controller ourselves.
Write to [email protected] about anything on this page. That address reaches the person who answers questions about personal data and handles grievances, as India’s Digital Personal Data Protection Rules require. We have not been notified as a Significant Data Fiduciary, so no separate Data Protection Officer is appointed; if that changes, this page will name one.
02What we collect, and why
Social Clinik holds these things and no others.
| What | Why it exists |
|---|---|
| Your account — your name and email address, as Google returns them when you sign in, and the role your hospital gave you | To sign you in and to decide what you may see. Social Clinik has no passwords: signing in with Google is the only way in, and we ask Google only for your name, email address and the fact that it is verified. |
| Your session — a hashed session token, the IP address and browser the session started from, and when it was last used | To keep you signed in, and to let you and us spot a session that should not be there. The token itself is never stored, only a hash of it. |
| Your hospital’s setup — its name, website, time zone, posting times, and the brand kit read from its site: logo, colours, fonts, departments, doctors (name, qualifications, speciality, photograph) and helpline | To write and design posts that look like the hospital and name the right people. Every one of these can be corrected or removed by hand. |
| Pages from the hospital’s public website — up to sixty of them, kept as text and a list of the images on them | To ground a post in what the hospital actually says about itself, rather than inventing it. |
| Photographs and consent records — the picture, a label for the consent (never a patient’s identity), what it covers, until when, the signed consent document, and who recorded or revoked it | So a picture of a person is only published while a valid consent covers it, and can be taken down when that consent ends. |
| Connected accounts — the Facebook Page or Instagram account id, its name and username, the permissions granted, the access token, and which Meta user connected it | To publish on the hospital’s behalf. Access tokens are encrypted before they are written down (AES-256-GCM) and are never shown back to anyone. |
| Posts and their history — captions, first comments, hashtags, alt text, generated and uploaded images, schedules, the post’s id and permalink on Facebook or Instagram, and what Meta answered when we published | To publish, to show you what went out and when, and to explain a failure. Meta’s replies are stored with access tokens stripped out. |
| Notifications and email — the notices shown in the app and the emails we send you (invitations, review reminders, alerts) | To tell you what needs you. While an email waits in the queue, its body is encrypted. |
| Service records — how much AI generation a hospital has used, and short-lived counters that limit how often an address may try to sign in | To keep a hospital within its credit cap, and to make brute force and abuse expensive. The counters expire by themselves within minutes or hours. |
03What we never collect
- No patient records. Social Clinik does not connect to a hospital information system, an EMR, a PACS or a laboratory system, and has no interface to receive one.
- No tracking. Neither this website nor the app carries an analytics SDK, an advertising pixel, or a third-party cookie. We do not profile you and we run no automated decision-making about you.
- No audience or inbox data from Meta. We ask for the permissions needed to publish a post and to take it down again, and nothing that would let us read your messages, your followers or your ad accounts.
- No selling. We do not sell personal information, and we do not share it for advertising.
04Photographs of people
A hospital’s website usually carries photographs of its doctors, its staff and sometimes its patients. Social Clinik treats them carefully:
- Pictures that look like testimonials are held back and cannot be published until someone at the hospital attaches a consent record to them.
- A consent record carries a label the hospital chooses, the scope of the permission, how long it lasts, and the signed document itself. It is not a place for a patient’s name, number or clinical details, and the product is built on that assumption.
- When a consent is revoked, Social Clinik deletes the post from Facebook and Instagram, or cancels it if it has not gone out yet.
The hospital is responsible for obtaining that consent lawfully before a photograph of a patient is used. A consent worth the name is specific about what it covers: that the picture may be published on the hospital’s Facebook Page and Instagram account, for how long, and that it may be withdrawn at any time without the person having to give a reason. Where the person is a child, it is the parent or guardian who gives it.
07Where it is kept
Social Clinik keeps its data in a PostgreSQL database and an S3-compatible object store, both in India, which is also where Codiste Private Limited is registered.
Some of the companies in the table above — Meta, Google, OpenAI, Jina and Magnific among them — process data outside India, because that is where their services run. Those transfers are covered by each provider’s own data-processing terms, and India’s Digital Personal Data Protection Act permits them except to a country the Government has restricted. We do not transfer anything to a restricted country.
08How long we keep it
- Sessions end after seven days of inactivity, and after thirty days in any case.
- Sign-in state and rate-limit counters carry their own expiry — minutes or hours — and are swept away every minute.
- Invitations expire on their own, and can be revoked before that.
- Posts, images, consent records and the brand kit are kept for as long as the hospital’s workspace is open, because they are its record of what it published.
- On deletion — we acknowledge a request within 72 hours and complete it within 30 days. Copies inside encrypted backups are overwritten within 30 days after that. See data deletion.
- Security logs are kept for a year, which the Digital Personal Data Protection Rules require of us, and then deleted.
09Your rights
You can ask us for a copy of what we hold about you, to correct it, to delete it, or to object to a particular use. Write to [email protected]. We acknowledge within 72 hours and answer within 30 days — never longer than the 90 days the Digital Personal Data Protection Rules allow. If our answer does not satisfy you, you may complain to the Data Protection Board of India, which asks that you raise it with us first.
If your information reached us through a hospital — because you are one of its doctors, or appear in one of its photographs — ask the hospital first, since it decides what happens to that material. Tell us anyway if you cannot reach them, and we will help.
You can disconnect a Facebook Page or Instagram account from Social Clinik at any time, in the app or from Facebook’s own settings. See data deletion for what happens then.
10How it is protected
- Access tokens, sign-in state and queued email bodies are encrypted (AES-256-GCM).
- Session tokens are stored only as a hash, so a copy of the database does not unlock an account.
- Traffic runs over HTTPS.
- Each person sees only their own hospital, and only what their role allows. Our own staff reach a hospital’s workspace only through a support window that expires after eight hours and is opened with a stated reason.
- Sign-in, invitation and Meta callback routes are rate limited, and the crawler is guarded against being pointed at private networks.
No system is perfect. If you believe something is wrong, write to [email protected] and we will look at it straight away.
11Children
Social Clinik is a tool for hospital staff and is not meant for children. We do not knowingly collect information from a child. A photograph of a child may only be published where the hospital holds consent from a parent or guardian.
12Changes to this policy
When this policy changes we update the date at the top of the page, and we tell the hospitals using Social Clinik by email if the change matters to them. This version is dated 24 September 2026.
Questions about this page? Write to [email protected].