Privacy Policy

1. Introduction & Scope

Audaya (“we,” “our,” or “us”) provides the Audaya Clinic OS software platform, designed to assist medical practitioners and clinical teams in streamlining operations, managing calendars, transcribing consultations, and arranging patient records.

This Privacy Policy explains how we collect, process, and safeguard information when you use our platform. Because Audaya is a specialized software service for healthcare providers, our handling of data is split between operational accounts (for clinic staff) and clinical data (entered about patients). We place the highest priority on data transparency and isolation.

2. Data Collection

We collect and process the minimum amount of information necessary to deliver and improve our clinical platform services:

• Account Information: Names, business email addresses, phone numbers, and professional credentials (such as medical license numbers) of doctors and clinic personnel who register to use the platform.
• Usage & Technical Data: IP addresses, browser types, device operating systems, and platform interaction logs. This helps us ensure platform security, perform threat audits, and improve user interface performance.
• Clinical Operational Data: Patient names, demographics, contact details, consultation transcripts, and medication records uploaded or created by clinic users.

3. AI-Assisted Documentation

Audaya may use machine learning, natural language processing, and generative artificial intelligence systems to assist with consultation transcription, note generation, summaries, and clinical workflow automation.

These AI-generated outputs and transcriptions are intended solely to assist healthcare providers by reducing administrative documentation burdens. Licensed healthcare professionals remain fully and exclusively responsible for reviewing, validating, and approving all clinical documentation before it is finalized or added to a patient's medical record. Audaya does not make clinical decisions, diagnoses, or treatment recommendations on behalf of providers.

4. Clinic Data Ownership

5. Patient Data Handling

We understand that patient data is highly sensitive and subject to strict confidentiality expectations. Our treatment of patient data is governed by the following core principles:

• No Monetization: We will never sell, lease, rent, or trade patient health information to third parties. We will never use clinical data for advertising, marketing, or profiling.
• Strict Isolation: Patient records are stored in logically isolated databases per clinic tenant to prevent cross-contamination or unauthorized access.
• Minimal Sub-Processing: We only transmit patient data (such as ambient voice files for consultation transcription) to trusted technical infrastructure providers that have executed written confidentiality agreements with us.

6. Data Retention & Deletion

Clinics retain complete ownership over their operational and clinical records. An export of clinic data can be requested at any time by authorized administrators.

Data deletion requests submitted by the clinic will be honored, subject to applicable state and national medical record retention laws. Following account termination, data is deleted from active systems within a reasonable period unless legally required to be retained for compliance, audit, or legal purposes.

7. Security Practices

We implement industry-standard safeguards designed to keep clinical operations secure and resilient:

• Encryption: All data is encrypted in transit using Transport Layer Security (TLS 1.3) and at rest using Advanced Encryption Standard (AES-256).
• Access Logging: Any staff access to patient records is logged in audit logs to ensure accountability.
• Vulnerability Management: We conduct continuous vulnerability scanning of our code dependencies to identify and address security flaws.

8. Contact Information

If you have questions about how data is handled or wish to submit a privacy inquiry, please contact hello@audaya.health or call +91 70754 70066.

Go to contact form