Data retention schedule

Last updated: 1 September 2026

1. How to read this page

This is the public retention schedule for Tensor Foundry & Labs (“Hospital Hunter”). Clinic onboarding contracts may point here instead of repeating the table in every signature pack.

Hospitals remain responsible for their own medical-record rules. We keep what they enter so they can run the ERP; we do not sell it. For how to ask us to delete data, see data deletion instructions.

2. Schedule

Data	How long we keep it	Notes
OTP codes and short-lived login sessions	Hours to a few days	Access tokens expire in 15 minutes; refresh cookies last only while the session is used.
Patient directory accounts and wallet uploads	While the account is active	After a verified deletion request we aim to complete deletion within 30 days (how to request).
Clinic ERP records (OPD, lab, pharmacy, expenses, attachments)	While the clinic account is active	After the clinic ends its subscription, or a verified clinic offboarding request, we delete or anonymize that clinic’s operational data within 90 days, except rows listed below that law requires us to keep.
Bills, owner ledger, GST-related financial rows	8 years from the end of the financial year	Kept so clinics can meet Indian tax and GST record-keeping duties.
ICT and security logs (application, access, load balancer)	180 days, stored in India	CERT-In Directions 2022 require a rolling 180-day log window in Indian jurisdiction. Production hosting is Google Cloud `asia-south1` (Mumbai).
Encrypted backups	Until the backup cycle overwrites them	Deleted rows can remain in backups for a limited period, then roll off.

3. What is not automatic yet

Clinic offboarding and verified user deletion are processed by request at privacy@hospitalhunter.com. Nightly purge jobs for every table are not all live; this schedule is the target we apply when we delete, and the promise in clinic contracts. We will not claim a row is gone until we have deleted it.

4. Related

Contact: privacy@hospitalhunter.com