Security & Data Protection

SehatGraph follows privacy and security principles including:

• Data minimisation
• Purpose limitation
• Controlled access
• Secure processing
• Appropriate data retention
• Privacy-aware product design
• Responsible handling of health information
• Continuous improvement of security practices

Depending on the service and technology environment, SehatGraph may use appropriate technical safeguards including:

The specific security controls used may vary depending on the system, service and technical environment.

Access to personal data is restricted to authorised personnel, systems and service providers who require access for legitimate business or service purposes.

Where appropriate, access is strictly governed through authentication, role-based permissions, least-privilege principles, administrative access controls, and comprehensive monitoring and audit logging.

We aim to limit access to personal data to what is reasonably necessary.

Health-related information may include medical reports, symptoms, prescriptions, consultation information, diagnostic information and other health-related data provided through SehatGraph.

We apply appropriate safeguards to protect such information and seek to prevent unauthorised access or disclosure.

Users should ensure that their account credentials and devices are kept secure and should not knowingly share their account access with unauthorised persons.

SehatGraph may provide AI-powered healthcare and wellness features.

Where personal data is processed through AI-enabled services, appropriate security and access controls are intended to be applied to the relevant processing environment.

We seek to prevent unauthorised access to information submitted through AI-enabled features.

Personal data will not be used for unrelated purposes in a manner inconsistent with our privacy commitments and applicable law.

SehatGraph may work with trusted third-party technology and service providers, including cloud infrastructure, payment, communication, security, analytics, AI and healthcare service providers.

Where third parties process personal data on our behalf, we seek to implement appropriate contractual, technical and organisational safeguards consistent with applicable requirements.

Personal data may be stored using secure infrastructure operated by SehatGraph or its authorised technology service providers.

We seek to use appropriate security controls for data storage, access and transmission. Data may be stored or processed in locations permitted under applicable law and our service requirements.

SehatGraph retains personal data only for as long as reasonably necessary for the relevant purpose or as required or permitted by applicable law.

When personal data is no longer required, we may delete, anonymise or securely dispose of it in accordance with applicable requirements and our retention procedures.

We may monitor systems, access activity and security events to:

• Detect suspicious activity and unauthorized intrusions
• Prevent unauthorised access
• Protect platform availability and integrity
• Investigate security incidents
• Improve our overall security controls

Security logs and related information may be retained for appropriate periods for security, operational, legal or regulatory purposes.

SehatGraph maintains procedures for identifying, assessing, containing and responding to suspected security incidents and personal data breaches.

Where a breach occurs, our response framework entails:

1. Identifying and containing the incident
2. Assessing affected systems and data
3. Taking corrective security measures
4. Investigating the root cause
5. Documenting the incident
6. Notifying relevant parties or authorities where required by applicable law
7. Taking steps to reduce potential harm

Access to personal data may be provided to authorised employees, contractors and service providers only where reasonably necessary.

Where appropriate, personnel are bound by rigorous confidentiality obligations and formal security/privacy compliance training.

Security is a shared responsibility. Users should:

• Use strong, unique, and complex passwords
• Keep login credentials and tokens strictly confidential
• Avoid sharing account access with third parties
• Keep devices, browsers, and mobile operating systems updated
• Use trusted and secure networks when accessing sensitive health metrics
• Log out of shared or public devices after use
• Immediately report suspected unauthorised access to SehatGraph

If you discover a potential security vulnerability affecting a SehatGraph website, application or service, please report it responsibly to:

Please provide sufficient technical information to help our security team understand and investigate the issue. Do not attempt to access, modify, delete or disclose another person's data or system information.

Although SehatGraph takes reasonable measures to protect personal data, no internet transmission, electronic storage system or digital service can be guaranteed to be completely secure.

We continuously review and improve our security practices to address evolving risks and threats.

Security threats and technologies evolve over time. SehatGraph may periodically update its security practices, controls and procedures to improve the protection of personal data and services.

This page may also be updated to reflect changes in our technology, services or applicable legal requirements.

Sehat Graph Technologies Private Limited

Website: https://www.sehatgraph.com

Security Team: Support@sehatgraph.com

Privacy & Data Protection: Support@sehatgraph.com

For security vulnerabilities, suspected unauthorised access or data-security concerns, please contact us through the appropriate email address above.