Last updated: 28 August 2026
Aura is a patient-communication service for clinics, operated by Aura AI Solutions, a sole proprietorship registered in India under Udyam registration number UDYAM-DL-02-0125881, at A-3/19, Police Computer CGH Society, B-16, Vasundhara Enclave, Delhi - 110096.
You can reach us at debanjan.b123@gmail.com.
Clinics use Aura to communicate with their patients over WhatsApp — appointment reminders, aftercare instructions, answers to questions about treatments and clinic information, and follow-ups with patients who have not visited in a while.
The clinic decides what is sent and to whom. Aura is the tool the clinic uses. In data-protection terms, the clinic is the Data Fiduciary for its patients' personal data and we act as its Data Processor, handling that data only on the clinic's instructions.
From patients, provided by the clinic: name, phone number, treatment history and dates, appointment details, package or session progress, language preference, and consent status.
From patients, when you message the clinic: the content of your messages, the date and time, your WhatsApp message identifiers, and which buttons or menu options you tap.
From people who are not existing patients: if you message a clinic's number without being a registered patient, we record your phone number, your message, and what you appeared to be asking about, so the clinic can respond and follow up. We do not treat this as consent to receive marketing.
From clinic staff: name, phone number, email, role, and language preference.
Generated by Aura: delivery and read status, which message template was used, and records of what Aura answered — kept so the clinic can review the quality of its own patient communication.
We do not collect payment card details, government ID numbers, or medical records beyond the treatment information the clinic itself provides. We do not track your location. We do not use cookies to follow you across other websites.
| Purpose | Basis |
|---|---|
| Appointment reminders and aftercare instructions | Performance of the clinic's service to you, and your consent to be contacted on WhatsApp |
| Answering your questions about the clinic and its treatments | Responding to your own enquiry |
| Recording your number and message when you contact a clinic | Responding to your enquiry — the same basis a receptionist has for taking a message |
| Follow-ups about treatments you have had before | Your consent, which you can withdraw at any time |
| Alerting clinic staff to booking, cancellation or medical messages | The clinic's legitimate operation of its practice |
Reply STOP to any message and we stop. It takes effect immediately and applies to all non-urgent messages from that clinic through Aura. You can also tell the clinic directly and ask them to remove you.
Your clinic. They see their own patients' data. They never see any other clinic's.
Service providers we use to run Aura:
| Provider | What for |
|---|---|
| Meta Platforms (WhatsApp Business Platform) | Delivering messages |
| Supabase | Database hosting |
| Vercel | Application hosting |
| Anthropic, OpenAI | Generating and understanding message text |
| Resend | Internal operational email |
Message content is sent to AI providers to compose and understand replies. We use them under terms that do not permit training their models on your data.
We do not sell your data. We do not share it with advertisers. We never share one clinic's data with another.
Data is processed in India. Some providers above process data outside India, under contractual protections requiring standards comparable to those we apply ourselves.
We keep a clinic's patient records, message history and enquiry records for as long as that clinic uses Aura. We delete them when the clinic asks us to, or within 30 days of the clinic ending its use of Aura, at the clinic's instruction. An individual patient or enquirer can ask for their own record to be deleted sooner — see Data Deletion below.
We would rather state this plainly than publish a retention period we do not actively enforce.
Under the Digital Personal Data Protection Act, 2023, you can ask to access your data, correct it, erase it, withdraw consent, and nominate someone to exercise these rights on your behalf.
The fastest route is your clinic, since they hold the relationship. You can also write to debanjan.b123@gmail.com and we will act on it, or pass it to the clinic, within 30 days.
If you are not satisfied, you may complain to the Data Protection Board of India.
Aura's services are for adults. We do not knowingly process the data of anyone under 18. If a message suggests it concerns a minor, Aura does not answer it and refers the matter to clinic staff. If you believe we hold a child's data, contact us and we will delete it.
Data is encrypted in transit and at rest. Access is restricted, and each clinic's data is isolated at the database level so one clinic cannot read another's. If a breach occurs that affects you, we will notify you and the Data Protection Board as the law requires.
We will post changes here and update the date above. Material changes affecting how we use your data will be notified through your clinic.
These terms are between Aura AI Solutions and a clinic using the service. Patients receiving messages are not party to them; how we handle patient data is in the Privacy Policy above.
Aura sends and receives WhatsApp messages to your patients on your behalf: reminders, aftercare, answers to patient questions, and follow-ups with lapsed patients. You control what is sent. Messages requiring your judgement are held for your approval before going out.
We provide the service with reasonable skill and care, keep your data separate from every other clinic's, follow your instructions on patient data, and give reasonable notice of material changes.
We do not guarantee uninterrupted service. Aura depends on WhatsApp, and Meta can change its rules, its pricing, or your account's standing at any time, without us.
Fees, billing period and payment terms are as agreed in writing with you. Prices may change with 30 days' written notice. Where a free trial is agreed, its length and terms are as set out in writing, and either side may end a trial at any time.
Your clinic data and your patients' data remain yours. We process them only to provide the service. On termination we return or delete them at your instruction within 30 days.
Each side keeps the other's non-public information confidential.
To the extent the law allows, we are not liable for indirect or consequential loss, lost profits, or lost business. Our total liability in any twelve-month period is limited to the fees you paid us in that period. Nothing here limits liability for fraud, or for anything that cannot lawfully be limited.
Either side may end it with 30 days' written notice. We may suspend the service immediately if it is being used unlawfully, if Meta requires it, or if fees are materially overdue.
These terms are governed by the laws of India. The courts of Delhi have exclusive jurisdiction.
How to have your data deleted from Aura.
To stop messages immediately: reply STOP to any message from the clinic. This takes effect at once.
To have your data deleted: stopping messages is not the same as deletion. To be erased, either ask your clinic directly — they hold your record and can remove it — or email debanjan.b123@gmail.com with the phone number you were contacted on and a request to delete your data.
We will confirm your identity, delete your data or instruct the clinic to, and confirm to you within 30 days.
What gets deleted: your name, phone number, message history, treatment and appointment records held in Aura, and any enquiry record.
What may remain: records we are legally required to keep, and anonymised counts that cannot identify you. Messages already delivered to your phone or the clinic's are not ours to remove.
Email debanjan.b123@gmail.com from, or quoting, the number you messaged from. We will delete your enquiry record within 30 days.
Email debanjan.b123@gmail.com from your registered address. On confirmation we delete or export your clinic's data, including all patient records held for you, within 30 days.
Deleting your data does not by itself disconnect your number from the WhatsApp Business Platform. To disconnect, in the WhatsApp Business app go to Settings → Account → Business Platform → Disconnect Account. Then request deletion above.