Private by design. Built to protect.

1. Tenant Isolation & Security Rules

In Hospital Master, data separation is not left to application code filters. It is enforced cryptographically and at the database layer through strict security rules. Every incoming read and write request verifies the user's authenticated clinic identifier. A doctor or receptionist from Clinic A cannot read, query, or mutate patient files, tokens, or financial records belonging to Clinic B.

2. Role-Based Access Control

Clinics operate with diverse staff teams. Hospital Master enforces role-based access to safeguard sensitive functions:

• Reception & Front-Desk Staff: Limited to issuing tokens, managing queues, scheduling appointments, collecting payments, and registering patient demographics.
• Doctors: Access dedicated consultation views, visit histories, prescription uploads, and clinical diagnostics for their assigned patients.
• Clinic Admins: Authorised to review daily cash closing reports, configure doctor working hours, view overall clinic analytics, manage user seats, and perform data exports.

3. Data Ownership & Non-Destructive Plan Lapses

Your clinic's data belongs exclusively to your clinic. We do not lock away or delete records when subscriptions change:

• Grace Period: When a prepaid term reaches its renewal date, we provide a 3-day grace period where all operations remain fully active to ensure patient care is never interrupted mid-shift.
• Read-Only Mode: If a plan lapses after the grace period, the clinic account enters a secure read-only mode. Staff and doctors can still view all past patient records, appointment histories, and consultation notes, and can export all records. Nothing is deleted.
• Export Freedom: Clinic administrators can export patient registries, appointment lists, and daily financial summaries to CSV and PDF formats at any time.

4. Cloud Infrastructure & Execution

Hospital Master's backend business logic runs on Google Cloud Functions in the asia-south1 (Mumbai) region, ensuring low latency for healthcare operations across India and South Asia. Database documents and file uploads (prescription photos and lab reports) are hosted on Google Cloud Firebase with automated multi-zone redundancy and continuous backup protection.

5. Account & Data Deletion

In compliance with modern privacy standards and Google Play policies, any registered clinic administrator may request the permanent deletion of their clinic account and associated records. You can initiate this directly at hospitalmaster.besilon.com/delete-account or by writing to our data protection desk at directoroffice@besilon.com.

6. Zero Ad-Tracking and Data Commercialisation

Besilon's business model is straightforward software subscriptions. We do not sell patient data, do not profile clinic demographics, and do not integrate third-party advertising tracking networks into Hospital Master.