Terms of use

Last updated 8 October 2026.

These are the terms between XDQ Labs Private Limited — a private limited company incorporated in India, of Spaze iTech Park, Sector 49, Gurugram, Haryana 122018, India — and the clinic, hospital or company using Drapto, wherever it is. Drapto is our software, provided as a service over the internet.

What we provide

Software, as it is, on a subscription. We keep it running, keep it backed up, and fix what breaks. We do not practise medicine: every clinical decision recorded in Drapto is made by the clinician who records it, and nothing the software suggests overrides them.

Your data is yours

You own what you put in. You can export all of it at any time, in a form that opens without us. If you leave, you take it with you — we do not hold data hostage to a renewal and there is no charge for an export.

What we ask of you

• Keep your own logins private. Each person gets their own; a shared login makes an audit trail worthless.
• Only put in data you are entitled to hold.
• Do not use Drapto to send messages people have not agreed to receive.

Paying

Subscriptions are monthly, quarterly or annual, in advance, at the price shown to you in Drapto before you pay. Clinics in India pay in rupees, with GST on a tax invoice. Clinics elsewhere pay in US dollars, euros, pounds or UAE dirhams: that is an export of services from India, so no Indian GST is charged, and any tax your own country charges on services bought from abroad — VAT under the reverse charge, for example — is yours to account for. A payment above US$5,000, or a plan with something customised for you, is invoiced to you directly by XDQ Labs Private Limited. Everything keeps working while an invoice is outstanding — we would rather be paid late than switch off a clinic mid-surgery. If an account stays unpaid we will talk to you before anything changes.

Patient records outside India

In the US, the UK, Switzerland and the European Economic Area, clinical records open in Drapto once your clinic's owner accepts the patient-data terms inside it. Those terms are part of these. Your clinic is responsible for its own compliance — with HIPAA and your state's laws, or with the GDPR and your country's health-record law — including the decision to keep its records in Drapto, in India. We process them on your instructions and for nothing else. A Business Associate Agreement or a Data Processing Agreement is available on request; where one is signed, it governs what it covers.

Stopping

Either side can stop at the end of a paid term. We will not lock an account without telling a person first, and never during a working day without warning.

What we are not liable for

We are liable for what we control: the software running, the data being held, the backups restoring. We are not liable for clinical decisions, for what a clinic tells its patients, or for losses beyond what you have paid us in the previous twelve months.

Where this is governed

Indian law, and the courts of Gurugram, Haryana — for a clinic anywhere. A Business Associate Agreement or Data Processing Agreement we sign with you says what law governs it.

XDQ Labs Private Limited, a private limited company incorporated in India · Spaze iTech Park, Sector 49, Gurugram, Haryana 122018, India · hello@drapto.com
D-U-N-S 581612662 · DPIIT DIPP271804
Home · Privacy · Terms · Refunds · Contact