Acceptable Use Policy

Last updated: 24 September 2026

OpenORDO holds sensitive health information for clinics and their patients. This Acceptable Use Policy ("AUP") sets the rules for using the service so that it stays safe, lawful and reliable for everyone. It is part of the Terms of Service and applies to every user of a Clinic account, the public booking page, our APIs and every add-on.

You are responsible for everything done under your Clinic, including by staff you invite and anyone using your credentials.

OpenORDO is for running a legitimate healthcare practice: managing patients, appointments, doctors, billing, medical records, prescriptions, inventory and public bookings. Do not use it for unrelated storage, mass marketing lists, or any purpose that is not part of running your practice.

  • Only licensed professionals and authorised clinic staff should have access to clinical data. Give people the minimum role they need (Owner, Admin, Doctor, Front Desk).
  • Do not share logins. Each person should have their own account.
  • Remove access promptly when someone leaves the clinic or changes role.
  • Do not use OpenORDO if you are not legally allowed to practise or provide the services you offer.

You must:

  • have a lawful basis and any required patient notice or consent for the data you record and any communications you send;
  • enter only data that is necessary for care and administration;
  • keep records accurate and up to date;
  • respect patients' rights to access and correct their records;
  • not access records of patients you have no legitimate reason to see, and not use patient data for any purpose other than care, administration and billing, unless the patient consents or the law allows it;
  • not sell, license or share patient data with marketers, data brokers, insurers or others, except as the law allows and the patient has been told.

Do not put in free-text fields: payment card numbers, bank account or UPI PINs, passwords, or government ID numbers, unless you are legally required to keep them, and in that case only where they are strictly needed.

You must not:

  1. Break the law or use the service to commit fraud, or to record or promote unlawful activity. This includes practising without a licence, issuing prescriptions without proper clinical evaluation, false or fabricated records, or prescribing controlled drugs in violation of the law.
  2. Falsify medical records or invoices, or use the service for false insurance or government claims.
  3. Impersonate a doctor, clinic, patient, OpenORDO staff or any other person, or misrepresent your credentials.
  4. Access data you are not authorised to access, or try to bypass access controls, plan limits, feature flags, role restrictions or tenant isolation between clinics.
  5. Probe, scan or test the service's security without our written permission. Good-faith security reporting is welcome, see Section 7.
  6. Upload or transmit malware, or interfere with the service, other users or our infrastructure, including overloading it with automated requests, scraping, or denial of service.
  7. Reverse engineer, resell, sublicense or provide the service to third parties as a competing product, or use it to build a competing product or copy its design.
  8. Abuse the free plan or promotions, for example creating multiple clinics to avoid patient limits or repeat a promotion, or sharing an account across unrelated clinics to avoid paying for extra doctors or locations.
  9. Send spam or unsolicited messages to patients or others, or use the public booking page or any communication feature for advertising unrelated to their care.
  10. Post unlawful, abusive, hateful, sexually explicit or harmful content in notes, clinic profile text, booking page content, chat or files. The booking page and branded pages are visible to the public, so they must be accurate and not misleading (for example, no false claims about qualifications, cures or results).
  11. Infringe intellectual property, for example by uploading logos, images or text you do not have the right to use.
  12. Store or share illegal content, including child sexual abuse material. We will report this to the authorities.
  13. Use the service for emergencies. OpenORDO and Video Consultation are not emergency services, and patients in an emergency must be directed to emergency care.
  14. Process data of people in a way that is discriminatory or unlawful.
  • Confirm patient identity and obtain consent for teleconsultation, and follow the telemedicine rules that apply where you practise and where the patient is.
  • Do not record a consultation without the informed consent of everyone on the call and a lawful storage plan.
  • Do not share the room link publicly. Use "Share patient link" only with the patient or another authorised participant.
  • Do not use video calls to harass or mislead patients, or for non-clinical purposes.
  • Only a doctor or authorised staff should host consultations. Don't leave a call unattended with a patient in it.

6. E-Prescriptions and clinical content rules (if you use this add-on)

  • Only a qualified, registered prescriber may issue a prescription. You are responsible for the clinical content, dosing and checks (for example allergies and interactions). OpenORDO does not verify clinical accuracy.
  • Do not use E-Prescriptions to generate prescriptions in bulk, or to issue prescriptions without a clinical evaluation, or to circumvent legal controls on medicines.

If you find a vulnerability, please email support@openordo.com with details. We ask that you:

  • give us reasonable time to fix the issue before disclosing it;
  • do not access, change or delete data that is not yours, and stop as soon as you have demonstrated the issue;
  • do not perform social engineering, physical attacks or denial-of-service testing;
  • do not disclose patient data you may have come across.

We will not take legal action against good-faith research that follows these rules.

To report suspected misuse (for example a clinic showing signs of fraud, or a patient data concern), contact support@openordo.com.

If we believe you have breached this AUP, we may take action that is proportionate to the situation, including:

  • asking you to fix the issue;
  • removing or disabling content, booking pages or add-on features;
  • restricting or suspending a user or the whole Clinic, immediately if necessary to protect patients, users or the platform;
  • terminating the account under the Terms;
  • reporting the matter to regulators, law enforcement or the relevant medical council, and cooperating with legal requests.

A suspended Clinic sees a suspension notice and cannot sign in until resolved. Suspension does not delete data. Actions taken by our administrators are recorded in an audit log. Where possible we will tell you why and give you a chance to respond, but not where notice would create a risk to safety, security or an investigation. Fees are not refunded for accounts terminated for breach.

We may update this policy from time to time. The latest version is always on this page.

support@openordo.com · Security: support@openordo.com · OpenORDO, Chandigarh, India

Acceptable Use Policy | OpenORDO