Who operates the service
OrthoGraft Private Limited, Vadodara, Gujarat, India, operates this website and the OrthoGraft Care workspace. Use the privacy contact form for a question or data request.
Information you provide
Forms collect your name, email address, organisation, topic, message and consent. Access requests also collect plan, billing preference and team-size range. Invitation records contain an email address, plan, access period and hashed credential.
Cases contain the code, objective, programme, status, visits, notes, authors, material references, tasks, AI drafts, review status and saved timestamps. Use de-identified evaluation records. Guest cases stay in browser storage; invited cases are saved privately on the server when you select Save case.
Technical information and functional storage
The application uses a session cookie for access and security, and browser storage for guest cases. It includes no advertising trackers, third-party analytics or nonessential cookies. Hosting systems may log IP addresses, browser information and request timestamps. Application rate-limit counters use keyed hashes of identifiers.
How information is used
Information is used to answer enquiries, assess access requests, provide workspaces, enforce allowances, process requested AI drafts and maintain the service. Depending on the activity and applicable law, processing is based on your request or consent, the service relationship or legitimate interests in secure operation.
Providers and processing
Hosting, SMTP email and AI providers process information needed for their functions. A requested AI draft sends the current case fields to the configured provider. Saving alone does not request AI processing. Processing may take place outside your country and is subject to provider terms. Contact us for current arrangements before submitting restricted information.
We do not sell personal information through this service. The software’s API response-storage setting does not remove all possible provider logging or retention.
Retention and control
Website enquiries are normally kept in active storage for up to 180 days and cleaned on site activity. Cases remain until deleted or a verified deletion request is processed. Access metadata is retained for account administration. Temporary AI retry records are cleaned after 24 hours on workspace traffic. Hosting backups follow their own cycle.
Guest drafts remain until you delete them or clear browser storage. You control downloaded files. Records needed for legal obligations or disputes may be retained longer.
Your requests
You can ask to access, correct or delete your information, withdraw consent where it applies, or raise a concern. Additional rights may apply in your location. Provide enough context through the privacy form for us to identify the record; identity verification may be required. Never include credentials in the request.
Scope and changes
The service is for adult professional users. Do not submit identifiable patient information. This notice may change as the service develops; the date above identifies the current version.