Privacy Policy

Ayuvra Intelligence operates as a data processor on behalf of healthcare providers (hospitals, clinics, and doctors), who act as the primary data fiduciaries for patient data. We process patient information strictly under the instructions of the respective healthcare provider and do not independently determine the purpose of such processing.

To provide our AI-powered clinical documentation platform, we collect the following specific categories of data on a principle of data minimization:

• Patient Health Records: Symptoms, vital signs, demographic details, and medical history captured during clinical consultations.
• Conversation & Audio Transcripts: Audio recordings and their resulting text transcripts processed purely for the purpose of generating clinical documentation.
• Doctor Inputs: Clinical observations, diagnostic notes, edits, template configurations, and final approvals made by healthcare professionals via the platform.
• Basic User Data: Professional names, clinic associations, role designations, and business contact details (phone numbers, emails) of clinic staff utilizing the platform.
• Professional Verification Data: The doctor's qualification, specialty, medical registration number, issuing medical council and mobile number, and a copy of the medical registration certificate. We use these only to verify that the account belongs to a registered medical practitioner, and the verified qualification and registration number are printed on documents the doctor generates. The certificate is visible only to the Ayuvra team and is deleted once verification is complete.
• Device & System Logs: Standard technical information including IP addresses, browser types, and anonymized interaction timestamps to maintain platform security and reliability.

Under global data protection standards, we process your data based on explicit consent and strictly for the following limited purposes:

• Clinical Documentation Automation: Operating our proprietary AI systems to parse audio inputs and generate professional clinical documentation, including SOAP notes, prescriptions, and summaries.
• Personalized Templates: Storing and applying doctor-specific template preferences to customize AI output formats, languages, and documentation styles.
• Analytics & Improvement: Analyzing heavily anonymized metadata to monitor system uptime, improve transcription accuracy, and enhance overall platform reliability.
• Compliance & Legal Obligations: Retaining mandatory audit logs and access histories to comply with healthcare data security laws and regulatory inquiries.

To deliver robust cloud functionality, we partner with vetted, industry-leading third-party service providers. We enforce strict contractual obligations and data processing agreements to ensure they cannot use your data for their own purposes.

• Cloud Infrastructure: Our platform is hosted on enterprise-grade cloud infrastructure with encrypted primary data storage and real-time synchronization. All data is stored within secure, SOC 2-compliant data centers.
• AI Processing: We utilize proprietary and third-party AI models for speech-to-text transcription, multi-language support, and clinical note generation. Critical Note: Your clinical data is transmitted statelessly via encrypted API calls and is explicitly excluded from being used to train any public foundational AI models.
• Hosting & Security: Our platform is deployed with enterprise-grade DDoS protection, SSL/TLS encryption, and privacy-first performance monitoring.

Your data is protected using industry-standard encryption protocols both in transit and at rest. We implement strict Role-Based Access Controls (RBAC) ensuring only authorized clinicians can access patient records within their own practice.

Retention Policy: We retain clinical data for as long as your clinic's account exists, pursuant to standard medical record-keeping laws in India. This includes after a paid plan ends: the account becomes read-only, and records remain available to view and export. We never delete data because of non-payment. Audio recordings used for transcription are processed in real-time and discarded immediately after processing; they are not permanently stored on our servers. Registration certificates are deleted within a day of verification. If an account is deleted, we keep only a one-way cryptographic hash of the registration number and council, so that a repeat free trial can be identified; it cannot be used to recover the number.

Each healthcare provider's data is logically isolated from other providers on our platform. Row-level security policies ensure that clinical records, templates, patient data, and consultation history are accessible only to the authenticated doctor or clinic staff who created them. One provider cannot access, view, or modify another provider's data under any circumstances.

In accordance with Indian law, you and your patients hold explicit rights regarding personal data:

• Right to Access: You may request a complete export of your personal and clinical data housed on our systems.
• Right to Correction: You may correct inaccurate or misleading personal data through your clinic dashboard.
• Right to Erasure: You may request the deletion of non-mandatory data or withdraw consent entirely. Upon verified request, we will purge records within 30 days unless legal/medical retention mandates supersede.
• Right of Grievance Redressal: You have the right to register complaints regarding data handling via our Grievance Officer, Aayush Raj Verma ([email protected]). See our Contact & Grievance Redressal page for the process and timelines.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify registered users of material changes via email or an in-app notification. Continued use of the platform after such notification constitutes acceptance of the revised policy.

For privacy inquiries, to exercise your data rights, or to contact our Grievance Officer (Aayush Raj Verma), please reach out to us at: [email protected].