Privacy Policy

Modern Surgical Instruments ("MSI", "we", "us") operates a private B2B healthcare procurement platform connecting verified healthcare buyers with verified manufacturer partners. This policy explains what data we collect, why we collect it, and how we safeguard it.

1. Information We Collect

• Account details: name, designation, organisation, email, mobile, address.
• Business identifiers: GST, PAN, licenses, compliance certificates (VSPs).
• Transactional data: orders, purchase orders, dispatch and delivery records.
• Usage data: login events, in-app activity, AI Guide interactions, audit logs.

2. How We Use Data

To operate the procurement workflow, authenticate users, verify partners, process orders, send transactional notifications, generate reports, and maintain audit trails required by law.

3. White-Label Protection

Customers never see manufacturer identity or factory pricing. Manufacturer partners never see customer identity, contact details, or final pricing. This separation is enforced at the database and application layers.

4. Data Security

Data is encrypted in transit (TLS) and at rest. Access is scoped by role via row-level security. Storage buckets containing certificates and business documents are private and served through signed URLs.

5. Data Retention

Business and transactional records are retained for the duration required by applicable healthcare and tax regulations. Account data is retained for the life of the account and deleted or anonymised on verified request, subject to legal holds.

6. Sharing

We do not sell personal data. We share limited data with subprocessors (hosting, database, email delivery, AI providers) strictly to operate the service.

7. Your Rights

You may request access, correction, export, or deletion of your data by contacting privacy@msi.example.

8. Changes

We will post updates to this policy on this page with a revised "Last updated" date.