Privacy Policy & Health Data Protection
Last Updated: August 30, 2026 • Effective for Web Platform, Desktop Software, and Mobile Apps on Indus Appstore & Google Play.
Our Commitment to Your Privacy
LabERP ("we", "our", or "us") provides cloud-based and mobile diagnostic laboratory ERP solutions. We treat all medical diagnostic results, patient demographics, and pathology records with strict confidentiality, 256-bit encryption, and zero unauthorized third-party sharing.
1. Information We Collect
When you register as a Pathology Lab Owner, Lab Technician, Doctor, or Patient using our Web or Mobile Application, we collect the following categories of information:
- Account & Profile Data: Name, pathology laboratory name, business email address, phone number, physical lab address, and login credentials.
- Patient & Diagnostic Records: Patient name, age, gender, contact number, referring doctor details, sample collection dates, barcoded sample IDs, and diagnostic test parameters (e.g., CBC, Biochemistry, Hormones, Urine).
- Billing & Payment Data: Invoice amounts, discount rates, payment mode (UPI, Cash, Card), and payment transaction IDs processed through secure payment gateways.
- Device & Usage Information: Device model, operating system version (Android / Windows), IP address, app error logs, and performance diagnostics.
2. Android & Mobile App Permissions
Our mobile app (available on Indus Appstore & Google Play) requests the minimum permissions required to perform diagnostic laboratory operations:
Used exclusively for scanning sample tube barcodes and QR codes during patient check-in and specimen collection.
Required to save generated PDF lab reports, patient invoices, and barcode labels directly to the device storage.
Required for real-time synchronization between the mobile app, local counter PC, and cloud database.
3. How We Use Your Information
We process collected data solely for legitimate diagnostic and ERP service operations:
- To generate accurate, tamper-proof diagnostic pathology test reports.
- To deliver instant SMS and WhatsApp notifications containing secure report download links to patients.
- To calculate doctor commissions, lab analytics, and daily collection revenue summaries.
- To maintain compliance with national clinical establishment standards and medical record guidelines.
4. Medical Health Data Security & Encryption
We implement industry-grade security measures to safeguard sensitive patient health information (PHI):
- 256-Bit SSL/TLS Encryption: All data transmissions between browser/mobile clients and our servers are encrypted.
- Multi-Tenant Isolation: Every pathology laboratory operates in an isolated data tenant ensuring no cross-organization data leakage.
- Role-Based Access Control: Lab staff, technicians, and front desk operators only access data permitted by their designated roles.
5. Data Retention & Account Deletion
Pathology lab accounts retain diagnostic records in accordance with applicable medical council record retention guidelines.
User Deletion Requests: If you are an individual patient or lab administrator wishing to request the permanent deletion of your profile or account data, you may email us at support@samraterp.com with your registered phone number or Lab ID. Verified deletion requests are processed within 7 business days.
Contact & Grievance Redressal
If you have questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact our Data Protection Officer: