Privacy Policy
MohaX Digital – Mesora Health
Last Updated: 05 June 2026
1. Introduction
MohaX Digital ("MohaX Digital", "we", "us", or "our") provides Mesora Health, a cloud-based clinic management platform.
We are committed to protecting the privacy, confidentiality, and security of personal data processed through Mesora Health.
2. Roles and Responsibilities
For patient data stored within Mesora Health, the Clinic or Healthcare Provider acts as the Data Controller, and MohaX Digital acts as the Data Processor.
The Clinic determines which personal and medical information is collected and stored. MohaX Digital processes such information solely for the purpose of providing the service.
3. Information We Process
Depending on how the platform is used, the following categories of information may be processed:
Clinic Information
- Clinic name
- Clinic address
- Contact information
- Billing and subscription information
User Information
- Name
- Email address
- Login credentials
- User roles and permissions
- Activity logs
Patient Information
- Patient name
- Contact details
- Date of birth
- Gender
- Appointment information
- Medical notes
- Clinical records
- Uploaded documents and attachments
Technical Information
- IP address
- Browser type
- Device information
- Login history
- System logs
- Security events
4. Purpose of Processing
- Providing clinic management services
- Patient record management
- Appointment scheduling
- User authentication
- Security monitoring
- System maintenance
- Backup and disaster recovery
- Technical support
- Service improvement
MohaX Digital does not process personal data for advertising purposes.
5. Legal Basis for Processing
Where applicable under data protection laws, processing may be based on:
- Contractual necessity
- Compliance with legal obligations
- Legitimate business interests
- Explicit consent obtained by the Clinic from the patient
The Clinic remains solely responsible for obtaining any consent required by applicable laws before collecting or storing patient information within Mesora Health.
6. Data Ownership
All patient records, clinic information, and customer data remain the exclusive property of the Clinic. MohaX Digital does not acquire ownership rights over customer data.
7. Confidentiality
MohaX Digital treats all customer and patient information as confidential. MohaX Digital personnel do not routinely access patient records.
Access may occur only when reasonably necessary for:
- Technical support
- Troubleshooting
- Security investigations
- System maintenance
- Compliance with legal obligations
- Explicit authorization from the Clinic
8. Security Measures
MohaX Digital implements reasonable technical and organizational measures designed to protect personal data, including:
- HTTPS/TLS encryption
- Access control mechanisms
- User authentication
- Role-based permissions
- Security logging
- Regular software updates
- Backup procedures
- Infrastructure monitoring
Despite these measures, no method of transmission or storage can be guaranteed to be completely secure.
9. User Responsibilities
Customers are responsible for:
- Maintaining password confidentiality
- Managing employee access rights
- Protecting devices used to access the platform
- Promptly reporting suspected security incidents
- Securely handling exported data
MohaX Digital shall not be responsible for unauthorized access resulting from customer negligence or failure to implement appropriate security practices.
10. Data Retention
Personal data is retained only for as long as necessary to provide services, fulfill contractual obligations, comply with legal requirements, resolve disputes, and enforce agreements.
11. Backups and Disaster Recovery
MohaX Digital may perform regular backups to ensure service continuity and disaster recovery capabilities. Backup copies may remain stored for a reasonable period following deletion from active systems.
12. Third-Party Service Providers
MohaX Digital may engage trusted third-party service providers for:
- Cloud infrastructure
- Data hosting
- Email delivery
- Monitoring services
- Security services
- Backup services
Such providers may process personal data only to the extent necessary to provide their services.
13. International Data Transfers
Where personal data is transferred outside the country in which the customer operates, MohaX Digital will take reasonable steps to ensure appropriate safeguards are implemented.
14. Data Breach Notification
In the event of a confirmed security incident affecting customer data, MohaX Digital will make reasonable efforts to notify affected customers without undue delay after becoming aware of the incident.
15. Changes to this Privacy Policy
MohaX Digital may update this Privacy Policy from time to time. Updated versions will be published on the official website and become effective upon publication.
16. Contact Information
MohaX Digital
Email: info@mohax.de
Product: Mesora Health