Privacy Policy
This Privacy Policy explains how SamLab (“SamLab”, “we”, “us”) handles information collected through our website and software.
Last updated: 29 May 2026 · Operated by SamLab
1. Information we collect
We collect information you provide directly, such as when you request a demo, start a trial, make a payment or contact us. This may include:
- Contact details — name, lab name, email, phone and city.
- Billing details processed by our payment provider (we do not store full card numbers).
- Support correspondence and the contents of messages you send us.
The SamLab desktop application stores your lab’s operational data locally on your own machine. Where you enable cloud sync or backup, that data is transmitted securely to our cloud infrastructure on your behalf.
2. How we use information
- To provide, operate, license and support the SamLab software.
- To process payments, subscriptions and trials.
- To respond to enquiries and provide customer support.
- To improve our products and communicate important updates.
3. Patient & health data
SamLab is used by laboratories to process patient and diagnostic information. That data belongs to the laboratory (the data controller). We act only as a processor for any data synced to our infrastructure, and we do not sell or use it for advertising. Laboratories are responsible for obtaining any consents required under applicable law (including India’s Digital Personal Data Protection Act, 2023 and, where relevant, ABDM guidelines).
4. Payment processing
Online payments are processed by our third-party payment gateway (Razorpay). Your payment information is handled in accordance with the payment provider’s own privacy policy and PCI-DSS standards. We receive only transaction confirmation and limited billing metadata.
5. Data sharing & sub-processors
We do not sell your personal information. We share information only with the service providers below, who help us operate, and where required by law:
- Google Firebase — authentication & data storage (USA).
- Vercel — website hosting (USA).
- Razorpay — payment processing (India).
- Brevo — transactional email (EU).
- Upstash — rate limiting (USA).
- Google reCAPTCHA — bot protection.
- Cloudflare R2 — report file delivery.
- Meta WhatsApp Cloud API — messaging, where enabled by your lab.
- Our own licensing backend at api.samlab.in — hosted on Render (USA).
Because some of these providers operate outside India, cross-border transfers of personal data occur to the countries noted above. Each provider processes data only to deliver its service to us.
6. Cookies
We use only essential cookies — those required for authentication (keeping you signed in), security and rate-limiting, and remembering a maintenance-preview preference. We do not use advertising or analytics cookies, and we do not track you across other websites.
7. Data security
We use reasonable technical and organisational measures to protect information, including encryption in transit, access controls and signed software licensing. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Data retention
We keep personal data only as long as needed for the purpose it was collected, or as the law requires:
- Trial and contact enquiries (leads) — up to 24 months from your last interaction.
- Account and billing records — as required by GST and tax law (currently 8 years).
- Shared report links — until the link’s expiry date, after which the files are deleted.
- Support emails — up to 24 months.
You may request earlier deletion of your data at any time (see “Your rights” below); we will honour it except where a legal retention obligation applies.
9. Your rights
You may request access to, correction of, or deletion of your personal information. Send your request to support@samlab.in with the subject line “Data Deletion Request” (or “Data Access Request” / “Data Correction Request” as applicable). We will honour verified requests within 30 days, subject to any legal retention obligations described above.
10. Grievance redressal
In line with the Digital Personal Data Protection Act, 2023, we have designated a Grievance Officer to address your concerns about how your personal data is handled:
Grievance Officer, SamLab
SamLab
Kota, Rajasthan, India
Email: support@samlab.in
Phone: +91 98284 00519
We will acknowledge your grievance within 48 hours and aim to resolve it within 30 days.
11. Changes to this policy
We may update this policy from time to time. The “last updated” date above reflects the latest revision.
12. Contact us
SamLab
Kota, Rajasthan, India
Email: support@samlab.in
Phone: +91 98284 00519