This notice tells you what personal data NBALL Technologies India Private Limited ("Cynaps") processes about you, why, and what you can do about it. It is available in English and in each of the twenty-two languages of the Eighth Schedule to the Constitution — choose yours above. It is deliberately short; our full Privacy Policy carries the detail.
1. Who is asking, and in what capacity
NBALL Technologies India Private Limited (CIN U62099TS2025PTC196111), registered at 2-4-821/1, 19/7, Road No. 1, New Nagole, Alkapuri, Saroornagar, Hyderabad – 500035, Telangana, India, is the Data Fiduciary for this notice. You can reach us at grievance@cynaps.co or +91 91210 61239.
This notice is given to you as a user of the Service — the clinician, or the staff member, whose account it is. Where a clinic uses Cynaps to process a patient’s data, the clinic is the Data Fiduciary for that data and Cynaps acts only on its instructions; the clinic gives the patient their own notice, and we build the means for it.
2. What we process, and why
We process only what a purpose below actually needs. Each row is a purpose in its own right; we do not use data collected for one of these for any of the others.
| What we process | Why we process it |
|---|---|
| Your name, email address, mobile number and password | To create and secure your account, and to let you sign in. |
| Your professional details — qualification, specialty, medical registration number, clinic name and address | To confirm you are entitled to use clinical features, and to print your identity on the documents you issue. |
| Clinical content you enter or dictate, and files you upload | To produce the document or answer you asked for, and to keep it on your record afterwards. |
| Billing details and payment records | To take payment for a subscription, to issue receipts, and to meet tax and accounting duties. |
| Device, log and usage information | To keep the Service secure and available, to investigate incidents, and to see which features are used. |
| Records of who received a document you sent | To keep an accurate account of disclosures — so that if a question arises later, it can be answered. |
3. Your consent, and withdrawing it
Where we rely on your consent, you may withdraw it at any time, and it must be as easy to withdraw as it was to give. Withdrawal applies from the moment you make it: it does not undo processing already lawfully carried out, and it does not by itself delete what we already hold.
Some processing does not rest on consent. Where you have voluntarily given us data for a purpose and have not objected, the Act permits us to process it for that purpose as a legitimate use. We also keep certain records for as long as another law requires.
To withdraw consent, write to grievance@cynaps.co, or use the privacy controls in your account settings.
4. Your rights, and how to use them
- Access — a summary of the personal data we hold about you and what we do with it, and the identities of anyone we have shared it with.
- Correction — to have inaccurate or misleading data corrected, incomplete data completed, and out-of-date data updated.
- Erasure — to have your personal data erased, unless we are required to keep it by law or it is needed for a purpose you have not withdrawn from.
- Nomination — to nominate another person to exercise these rights on your behalf if you die or become unable to act.
- Grievance redressal — to complain to us first, and to have your complaint answered.
Write to our Grievance Officer at grievance@cynaps.co, or raise a request from the support section inside the product. Tell us what you want and enough to identify your account. We answer grievances within ninety days, and usually far sooner.
5. Complaining to the Data Protection Board
If you are not satisfied with how we have answered you, you may complain to the Data Protection Board of India. You should ordinarily come to us first, so that we have had the chance to put it right; you do not lose your right to go to the Board by doing so.
The Board accepts complaints electronically. Its current address for complaints is published by the Government at the Board’s official website.
6. What the Act asks of you
The Act also places duties on data principals: not to impersonate someone else, not to suppress material information, not to register a false or frivolous grievance, and to give only authentic information when asking for correction or erasure.