Privacy Policy

Patient health and insurance data is confidential. This page explains what we collect, why, and how it is protected.

What this policy covers

This policy explains how we collect, use and protect information on this website and in the AyyanRCM platform used by hospitals for registration, pre-authorisation, claims, scheme claims and collections.

Information we collect

Website forms: name, work email, hospital name, city, bed count, payers, schemes and HIS details you choose to share.
Hospital account data: staff names, roles and login activity.
Patient and claim data entered or imported by the hospital: registration details, policy and beneficiary details, bills, discharge summaries, approvals and settlement records.
Technical data: browser type, pages visited and a session cookie used for the form security check.

Hospitals control patient data

Patient health and insurance data in the platform belongs to the hospital. We process it only on the hospital's instructions, to provide billing, claims and collections features.

Requests from patients to access or correct their records are passed to the hospital that holds them.

How we use information

To create accounts and send login credentials.
To run the platform desks, including the AI Denial Predictor, for the hospital that owns the data.
To respond to demo requests and support questions.
To keep the service secure and investigate misuse.

AI and claim data

The AI Denial Predictor reads claim files to flag possible gaps for billing staff. It does not change medical records or bills, and every flag is reviewed by a person.

Claim data of one hospital is never shown to another hospital. Patient data is not used for advertising.

We do not sell personal or patient data. We share information only with service providers that host or operate the platform under confidentiality terms, with payers when the hospital submits a claim, or when the law requires it.

Security

Encryption in transit and at rest.
Role-based access, limited to authorised hospital staff.
Logs of every view and change to a claim record.
Regular backups and access reviews.

Retention

Hospital data is kept for as long as the hospital account is active and for any period the hospital or applicable law requires afterwards. Website enquiries are kept for up to two years.

Your choices

You can ask us to access, correct or delete information you submitted through this website by writing to us through the contact page.