Privacy Policy

• Account and clinic information: names, email addresses, authentication information, phone numbers, clinic details, team memberships, and settings.
• Patient and workspace information: patient contact details, appointment records, treatment information or notes entered by your clinic, enquiries, follow-ups, and message content and delivery status.
• Service information: usage and message-credit records, subscription details, connection information, and technical logs needed to operate and troubleshoot the service.
• Enquiries to us: information you choose to provide when requesting a demo or contacting support.

We use information to create and authenticate accounts, organise clinic records, manage bookings, deliver messages and reminders requested by your clinic, administer subscriptions and credits, answer enquiries, troubleshoot problems, and protect the service against misuse.

Clinics must have an appropriate lawful basis and provide the necessary notices or obtain consent before uploading patient information or sending messages. Where consent is required, it must be obtained before the relevant processing.

Your clinic decides what patient information to add and how to use it for patient administration. Aceso processes that information to provide the workspace on the clinic’s behalf. We handle account administration and direct enquiries for our own service operations.

If you are a patient, contact your clinic first for access to, correction of, or deletion of your clinical records. We can assist with service-related requests after verifying the requester’s identity and authority.

Information is shared as needed with authorised clinic users and providers supporting hosting, data storage, authentication, communications, and service operations. Connected messaging providers, including WhatsApp/Meta when enabled, receive the information needed to deliver and manage messages.

Third-party services also apply their own terms and privacy policies. Providers may process information in other countries, subject to applicable transfer requirements. Information may also be disclosed when legally required or necessary to investigate misuse or protect rights.

The service uses authentication cookies and browser storage to support sign-in and remember the selected clinic workspace. Blocking these features can affect account access. This policy does not treat unrelated advertising trackers as essential; any future non-essential tracking will need an appropriate notice and controls.

Information is retained as needed to deliver the service, support your clinic’s instructions, address disputes, and meet applicable obligations. Archiving a patient record does not delete it.

The account-deletion flow disables normal access and schedules deletion after a 30-day recovery period. You can recover the account by signing in during that period. Backups, security records, or records required by law may remain for their applicable retention periods. Ask us about a specific record or deletion request at agency@onepx.in.

The workspace uses account authentication and clinic-scoped access controls. Protect your credentials, limit team access appropriately, and tell us promptly about suspected unauthorised access. No online service can guarantee absolute security.

Depending on applicable law and our role in processing the information, you may request access, correction, deletion, withdrawal of consent, or assistance with a privacy complaint. Some records may need to be retained for legal or clinical reasons. Withdrawal does not affect processing already lawfully carried out.

Email agency@onepx.in with the subject “Aceso privacy request”. Please identify the relevant account or clinic without sending unnecessary patient records. We may verify your identity before responding. You may also raise a concern with the competent authority where available under applicable law.

Aceso accounts are intended for authorised adult clinic users. Clinics entering a child’s patient information are responsible for obtaining parent or guardian authorisation where required.

We may update this policy as the service changes. The date above identifies the latest revision. Material changes affecting existing users will be communicated through the service or available account contact details where required.