Privacy Policy

Who this policy covers

This policy applies to Insor Private Limited (CIN: U62013MH2026PTC465597), registered office A-1701, Orchid Suburbia, Off MG Road, New Link Rd., Kandivali West, Mumbai - 400067, Maharashtra, operating under the name Insor, and to insor.ai and the services Insor provides to clinics.

Insor provides an AI front desk to private clinics: it answers calls, replies on WhatsApp, books and reminds patients about appointments, and follows up after a visit, on instructions from the clinic that hires it.

The clinic is the data fiduciary for its patients under Indian law: it is responsible for its relationship with them, including telling them Insor may contact them on the clinic's behalf. Insor acts as the clinic's data processor. We hold and process that data on the clinic's instructions, and do not decide what it is used for beyond running the clinic's calls, messages, bookings and follow-ups.

Information we collect

Patient information the clinic already holds: name, phone number and appointment history, to the extent the clinic gives Insor access to run its calls and bookings.

Records of the interactions Insor has on the clinic's behalf: call recordings and transcripts, WhatsApp messages, and the outcome of each, such as a booking, a reminder sent or a follow-up completed.

Account details for the clinic's own staff and doctors who log in to Insor to see this activity: name, email, phone number and login credentials.

Standard technical information collected when anyone visits insor.ai, such as IP address, browser type and pages viewed, through our hosting provider's ordinary server logs. We do not run advertising or tracking cookies on this website, and we do not use this information to identify or profile an individual visitor.

How we use it

Only to run the clinic's calls, WhatsApp enquiries, appointment bookings, reminders and post-visit follow-ups, and to let the clinic's own doctors and staff see that activity for their own patients.

We do not use it to advertise to patients, build a patient app or directory, train models for use outside the clinic that provided the data, or profile patients for any purpose beyond that clinic's own follow-up.

Who we share it with

WhatsApp messages pass through Meta's WhatsApp Business Platform, because that is the only way a business can send or receive WhatsApp messages. Anything sent on WhatsApp is handled under Meta's own privacy terms as well as ours.

The infrastructure that runs and stores the service is hosted in India, with providers bound to protect it under contract with us.

We do not sell, rent or share patient data with advertisers, insurers, pharmaceutical companies, data brokers or any other third party. We disclose data beyond the above only if required by law, such as a valid order from an Indian court or government authority, and only to the extent that order requires.

Where it is stored and how it is protected

Everything, including calls and recordings, stays on servers in India and is encrypted, both moving and at rest, with access controlled per clinic. The full detail of how it is protected, and who at Insor can and cannot reach it, is on the data security page linked below.

How long we keep it

We keep it for as long as the clinic uses Insor, so that its own booking history and patient records stay usable. A clinic, or a patient asking through their clinic, can ask us to delete what we hold, and we will confirm what was removed. We may keep a limited record of a deletion request itself, to show it was honoured.

Your rights

India's Digital Personal Data Protection Act, 2023 gives a patient the right to know what personal data is held about them, to have it corrected or completed, to have it erased, and to have their grievance addressed. A patient can also nominate another individual to exercise these rights on their behalf in the event of death or incapacity.

Direct a request about your own data to your clinic first, since the clinic is the data fiduciary and holds the underlying consent record. You can also write to us directly at the address below and we will act on it or route it to the right clinic.

Children's data

Insor's services are provided to clinics, whose patients may include minors. Where a patient is a minor, the clinic is responsible for obtaining verifiable consent from a parent or lawful guardian before that minor's data is shared with Insor, as Indian law requires.

International transfers

Patient and clinic data is processed and stored in India and is not transferred abroad, other than the WhatsApp messages that necessarily pass through Meta's platform, which operates internationally as part of how WhatsApp itself works.

Changes to this policy

If how we collect, use or share data changes, we will update this page rather than issue a separate notice, so the policy always describes what is actually happening. The date below is when it was last revised.

Last updated 23 September 2026.

Grievance officer and contact

In accordance with the Information Technology Act, 2000 and rules made under it, the Grievance Officer for Insor Private Limited can be reached at jash@insor.ai or by post at the registered office above. Write to either for any question, complaint or request about this policy or your data, and we will respond within the time Indian law requires.

This policy is governed by the laws of India, and any dispute arising from it is subject to the jurisdiction of the courts in Mumbai, Maharashtra.