Privacy Policy

We collect information you provide directly, such as when you request a demo, start a trial, make a payment or contact us. This may include:

• Contact details — name, lab name, email, phone and city.
• Billing details processed by our payment provider (we do not store full card numbers).
• Support correspondence and the contents of messages you send us.

The SamLab desktop application stores your lab’s operational data locally on your own machine. Where you enable cloud sync or backup, that data is transmitted securely to our cloud infrastructure on your behalf.

• To provide, operate, license and support the SamLab software.
• To process payments, subscriptions and trials.
• To respond to enquiries and provide customer support.
• To improve our products and communicate important updates.

SamLab is used by laboratories to process patient and diagnostic information. Under India’s Digital Personal Data Protection Act, 2023, that data belongs to the laboratory, which is the Data Fiduciary for it. We act only as its Data Processor for any data synced to our infrastructure, processing it on the laboratory’s instructions — we do not sell it, rent it, use it for advertising, or use it to train any model. Laboratories are responsible for patient notice and consent, for responding to data-principal requests, and for the lawfulness of what they collect (including, where relevant, ABDM guidelines). The same split is set out in Clause 11 of our Terms & Conditions.

Online payments are processed by our third-party payment gateway (Razorpay). Your payment information is handled in accordance with the payment provider’s own privacy policy and PCI-DSS standards. We receive only transaction confirmation and limited billing metadata.

We do not sell your personal information. We share information only with the service providers below, who help us operate, and where required by law:

• Google Firebase — authentication & data storage (USA).
• Vercel — website hosting (USA).
• Razorpay — payment processing (India).
• Brevo — transactional email (EU).
• Upstash — rate limiting (USA).
• Google reCAPTCHA — bot protection.
• Cloudflare R2 — report file delivery.
• Meta WhatsApp Cloud API — messaging, where enabled by your lab.
• Our own licensing backend at api.samlab.in — hosted on Render (USA).

Because some of these providers operate outside India, cross-border transfers of personal data occur to the countries noted above. Each provider processes data only to deliver its service to us.

We use only essential cookies — those required for authentication (keeping you signed in), security and rate-limiting, and remembering a maintenance-preview preference. We do not use advertising or analytics cookies, and we do not track you across other websites.

We use reasonable technical and organisational measures to protect information, including encryption in transit, access controls and signed software licensing. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We keep personal data only as long as needed for the purpose it was collected, or as the law requires:

• Trial and contact enquiries (leads) — up to 24 months from your last interaction.
• Account and billing records — as required by GST and tax law (currently 8 years).
• Shared report links — until the link’s expiry date, after which the files are deleted.
• Support emails — up to 24 months.

You may request earlier deletion of your data at any time (see “Your rights” below); we will honour it except where a legal retention obligation applies.

You may request access to, correction of, or deletion of your personal information. Send your request to support@samlab.in with the subject line “Data Deletion Request” (or “Data Access Request” / “Data Correction Request” as applicable). We will honour verified requests within 30 days, subject to any legal retention obligations described above.

In line with the Digital Personal Data Protection Act, 2023, we have designated a Grievance Officer to address your concerns about how your personal data is handled:

Shashi Jain, Grievance Officer
Sammed Technosol
1-JH-28, First Floor, Housing Board Colony, Dadabari, Kota, Rajasthan 324009, India
Email: sammedtechno@gmail.com
Phone: +91 9828400519

We will acknowledge your grievance within 48 hours and aim to resolve it within 30 days.

We may update this policy from time to time. The “last updated” date above reflects the latest revision.

Sammed Technosol
1-JH-28, First Floor, Housing Board Colony, Dadabari, Kota, Rajasthan 324009, India
Email: support@samlab.in
Phone: +91 98284 00519