Privacy Policy

Gratiview, a Graticare product, is committed to protecting the privacy and security of the information entrusted to us by healthcare providers and the patients they serve.

1 · Scope

This policy applies to the Gratiview DICOM viewer, its optional Workstation and OrthoPlan plugins, our website and any related applications. By installing or using the software you agree to the practices described here.

2 · Information We Collect

• Account & licence information — names, roles, facility details, contact information and the device and licence-activation data of the people who administer or use the software.
• Usage & diagnostic data — application version, operating system, log records and crash diagnostics used to operate, secure and improve the software.
• Clinical data — DICOM images, study metadata, measurements, segmentations and surgical plans. These are processed locally on your device and are stored in our cloud only when you enable Workstation sync.

3 · Protected Health Information

We process Protected Health Information (PHI) only as a processor on behalf of our healthcare partners and in accordance with HIPAA and applicable data-protection laws; a Business Associate Agreement is available. Because Gratiview runs locally, imaging data stays on your device unless you choose to sync it through Workstation. PHI is never sold or used for advertising.

4 · How We Use Information

• To run the viewer and its plugins, and to open, render and report on studies.
• To activate licences, authenticate users and maintain audit trails.
• To synchronise studies across your licensed devices when Workstation is enabled.
• To diagnose issues, improve diagnostic tooling and reliability, and communicate about service, support and account matters.

5 · Data Security & Compliance

Our information-security management system is certified to ISO/IEC 27001. Data is encrypted in transit and at rest, access is role-based and logged, and we publish a DICOM conformance statement. Workstation cloud storage runs on secured, continuously monitored infrastructure.

6 · Retention

Studies you open locally remain under your control on your own device. Where you use Workstation, imaging and report data are retained according to the cloud storage included with your plan — 5 GB per licensed device, pooled — and your instructions. We delete or de-identify data when it is no longer required for the contracted purpose or by law.

7 · Your Rights

Patients should direct requests regarding their health records to the healthcare provider that ordered the study, who is the controller of that information. Where we act as controller of account data, you may request access, correction or deletion subject to legal and contractual obligations.

8 · Contact

Questions about this policy can be sent to [email protected] or by post to 4th Floor, Rukmini Tower, Harmu Road, Near Ratu Road Chowk, Ranchi, Jharkhand 834001, India.