About This Policy
This policy explains how cookies and similar technologies are used when you visit the ClinicFlow AI website or use the ClinicFlow AI application: which are in use today, which are not, and how any optional technology would be controlled.
ClinicFlow AI is a software service provided by Digi Craft Studio. In this policy, “ClinicFlow AI” means that software service and its website, and “Digi Craft Studio”, “we”, “us” and “our” mean the provider of the service.
This policy should be read with the Privacy Policy, which explains how personal information is handled. Where the two speak about cookies, they are meant to say the same thing.
What Cookies Are
A cookie is a small text file that a website asks your browser to store. It lets a site recognise your browser from one page to the next. Similar technologies include browser storage, pixels (small images or scripts that report that a page was viewed) and tags. In this policy, “cookies” includes similar technologies unless it says otherwise.
A first-party cookie is set by ClinicFlow AI itself. A third-party cookie is set by another company whose technology is on the page.
Technologies Currently Used
Today ClinicFlow AI uses only strictly necessary cookies:
- one cookie that keeps a signed-in user signed in and keeps the session secure; and
- a preference cookie that remembers your cookie choice, set only if you make one (section 7).
Today ClinicFlow AI does not use:
- analytics cookies or analytics services;
- advertising or marketing cookies;
- tracking pixels or conversion tags, including those of social-media or advertising platforms;
- remarketing or retargeting technologies;
- browser local storage or session storage; or
- third-party fonts, widgets, chat tools or embedded videos that set cookies.
Optional technologies may be introduced later. If that happens, sections 5 to 8 apply before they are used.
Strictly Necessary Cookies
Strictly necessary cookies are needed to provide the service you ask for, to keep it secure, or to remember your cookie choice. They do not need your consent and cannot be switched off in the cookie preferences, because the service cannot work without them. You can still block them in your browser, but sign-in will then not work.
| Cookie | Purpose | Category and provider | Duration |
|---|---|---|---|
| cf_session | Keeps a signed-in user signed in and maintains a secure session. | Strictly necessary. First-party, set by ClinicFlow AI. | Up to 12 hours, or until the user signs out. A session also stops working earlier if the user’s password is changed or the user is disabled or the account is closed. |
| clinicflow_cookie_consent | Remembers your cookie choice so that you are not asked again on every visit. It holds the version of the choice, whether analytics and marketing are allowed, and the time. It holds no name, email address, patient or clinic information, and no advertising identifier. | Strictly necessary. First-party, set by ClinicFlow AI. | About six months (180 days). It is set only when you save a choice in the cookie preferences, which is possible only when an optional technology is in use. |
One further short-lived security cookie (up to 10 minutes) is used only while a clinic connects an optional third-party backup service. That connection is not offered in the current release.
Analytics Technologies
Analytics technologies help a site owner understand how a site is used, for example which pages are visited. ClinicFlow AI does not use them today, and they are off by default.
If Digi Craft Studio introduces an analytics technology:
- it will be optional, and it will load only after you allow the Analytics category;
- it will be named, with its purpose, in this policy and in the cookie preferences before it is activated for visitors; and
- it will be built to load only on the public website pages, and not on the sign-in, sign-up or checkout pages or inside the signed-in application.
Advertising and Marketing Technologies
Advertising and marketing technologies measure how advertising campaigns perform, for example whether a visit followed an advertisement, and may be used to show advertising to people who have visited a site. ClinicFlow AI does not use them today, and they are off by default.
Digi Craft Studio plans to promote ClinicFlow AI and may later use approved advertising or conversion-measurement technologies in connection with campaigns on advertising platforms such as Meta and Google, or on other platforms. Such use would be future optional processing, inactive until it is implemented and you have allowed it.
If it is introduced:
- it will be optional, and it will load only after you allow the Marketing category;
- the technology and its purpose will be named in this policy and in the cookie preferences before it is activated for visitors; and
- the advertising platform will be a separate service with its own policies.
This policy does not say that any advertising platform’s technology is installed on the site. None is.
Consent and Preferences
Strictly necessary cookies do not need consent. Optional cookies (Analytics and Marketing) are off by default and are used only if you allow them.
When an optional technology is in use, a banner offers three equal choices: Accept all, Reject non-essential, and Manage preferences. Nothing optional is pre-selected. Declining optional cookies does not limit your use of the website.
Today no optional technology is in use, so no banner is shown. The Cookie preferences control in the footer of the public pages opens the cookie preferences at any time and shows what is and is not in use.
Your choice is stored in the preference cookie described in section 4. You are asked again after about six months, and sooner if the optional technologies we use change.
Withdrawing or Changing Consent
You can change or withdraw your consent at any time by using Cookie preferences in the footer of the public pages. Withdrawing is as easy as giving consent, and it applies to your next page load; the page reloads so that an optional technology that was running stops.
You can also delete cookies in your browser. If you delete the preference cookie, you will be asked again once an optional technology is in use.
Withdrawing consent applies from then on; it does not undo what happened before.
Third-Party Technologies
ClinicFlow AI does not currently load third-party analytics, advertising or tracking technologies.
Other third-party technology may be present as follows:
- Payment. When online payment for plans is available, the payment step uses the checkout of our payment provider. It is loaded from the provider and may use its own cookies and similar technologies under the provider’s own policies, so that your payment can be taken securely. It is used only at the payment step and is necessary for the payment you choose to make.
- Video. There is no embedded video on the site today. If a demo video is added, the video player of the video service would load only when you choose to play it, and that service’s own terms would apply. This policy will name it before then.
- Links. Sites you reach through links have their own cookie policies.
We do not control third-party technologies. If an optional one is introduced, it will be listed here and in the cookie preferences before it is activated.
If Digi Craft Studio introduces optional analytics or advertising technologies, this policy and the preference manager will identify their purpose and relevant controls before they are activated for visitors.
Cookie Duration and Storage
The sign-in session cookie lasts up to 12 hours. The cookie preference cookie lasts about six months. ClinicFlow AI does not use browser local storage or session storage.
We do not state durations or cookie names for optional technologies we do not use. They will be stated before such a technology is activated.
Do Not Track and Browser Controls
Most browsers let you block, limit or delete cookies, and many offer a “Do Not Track” setting. There is no single agreed way to respond to that setting. Because ClinicFlow AI does not use tracking technologies today, there is nothing for it to switch off; any optional technology introduced later is governed by your choice in the cookie preferences.
Blocking strictly necessary cookies will stop sign-in from working.
Security
The session cookie is signed so that it cannot be altered without detection, cannot be read by page scripts, is restricted from being sent with most requests that start on other sites, and is marked secure when the service runs in production. The preference cookie holds no personal information.
No cookie protects a shared device. Sign out when you use a device that other people can use.
Updates to This Policy
We may update this policy. The date it was last changed is shown at the top of the page. Before an optional technology is activated, this policy and the cookie preferences are updated to describe it. If a change affects what you have agreed to, you will be asked again.
Contact
If you have a question about this policy, write to support@digicraftstudio.in or use the Contact page.
Related documents: the Privacy Policy, the Terms of Service, the Cybersecurity, Service Availability & Business Continuity Policy, and the Legal & Policies page that lists every document.
This is one of ClinicFlow AI’s core legal documents. See all of them.