What this policy covers, and what it does not
This policy covers this website and the business information we hold about the people we work with. It covers visitors to aayuos.com, people who contact us, and the administrative contacts at practices and pharmacies on the network.
It does not cover protected health information. Patient information that a practice enters into the Aayu OS platform is processed by Om Healthcare Inc. as that practice's business associate, under a HIPAA business associate agreement signed with that practice. It is governed by that agreement and by that practice's own Notice of Privacy Practices, not by this policy. If you are a patient, your practice is your point of contact.
Om Healthcare Inc. operates the Aayu OS platform and is the controller of the information described in this policy.
Information we collect
Information you give us
If you email us or fill in a form, we receive what you send: typically your name, your work email address, your phone number, the practice or pharmacy you represent, and the content of your message. If your practice or pharmacy joins the network, we also collect the business and credentialing information that onboarding requires, such as licence numbers, a group NPI, and business addresses.
Information we collect automatically
Our hosting provider records standard server logs when you request a page, including your IP address, the time of the request, the page requested, the referring page, and your browser's user agent string. We use these for security, abuse prevention, and diagnosing faults.
What this website does not do
This website sets no cookies. It loads no third-party scripts, fonts, images, or trackers, and it runs no advertising or analytics tags. Nothing on a page you view here reports your visit to another company. We do not build advertising profiles and we do not track you across other websites.
Because we do not track you in the first place, there is nothing here for a Do Not Track or Global Privacy Control signal to switch off. We honour those signals by default.
How we use it
- To answer your enquiry and to talk to you about the platform.
- To onboard and administer a practice or pharmacy account, including verifying licensure and credentials.
- To provide, support, secure, and improve the platform and this website.
- To send operational messages such as order, billing, and service notices to account holders.
- To meet our legal, regulatory, tax, and record-keeping obligations.
- To establish, exercise, or defend legal claims.
We do not sell personal information. We do not share it for cross-context behavioural advertising. We have never done either.
How long we keep it
We keep business contact and enquiry information for as long as we have an active relationship with you or your organization, and afterwards for as long as we need it for our legal, tax, and record-keeping obligations, or to defend a claim.
Server logs are kept for a short operational period and then discarded.
Information held on behalf of a practice under a business associate agreement is retained and returned or destroyed according to that agreement. A practice can export its data for thirty days after its account ends.
How we protect it
Information is encrypted in transit. Access to production systems is limited to the people who need it, using individual accounts. Each practice's data is separated from every other practice's at the database layer, not only in application code. Access to records is logged.
No system is perfectly secure, and we do not claim otherwise. If you believe you have found a vulnerability, please email support@aayuos.com instead of disclosing it publicly.
More detail is on our security page.
Your choices and rights
You can ask us to give you a copy of the personal information we hold about you, correct it if it is wrong, or delete it. Email support@aayuos.com and we will respond within the time the applicable law allows. We may need to verify who you are first, and we may have to keep some information to meet a legal obligation.
You can unsubscribe from our marketing email at any time using the link in the message, or by replying and asking. We will still send operational messages about your account and your orders.
If you are a California resident, the California Consumer Privacy Act gives you rights to know, delete, correct, and to opt out of sale or sharing. As set out above, we do not sell or share personal information as those terms are defined, and we will not discriminate against you for exercising any right. Residents of other states with comparable laws have equivalent rights, and the same address reaches us.
Requests about a patient's health information should go to the practice that holds the record. As a business associate we are not permitted to act on those requests directly, and we will refer you to the practice.
Children
This website and the Aayu OS platform are intended for businesses and their staff, not for children. We do not knowingly collect personal information from anyone under eighteen through this website. If you believe a child has given us information here, contact us and we will delete it.
Where we operate
Om Healthcare Inc. is based in the United States and the platform is hosted in the United States. If you contact us from outside the United States, understand that your information will be processed here, under United States law.
Changes to this policy
We may update this policy. The effective date at the top of the page always reflects the current version. If we make a change that materially affects how we handle information we already hold about you, we will tell account holders directly rather than relying on this page alone.
Contact
Questions about this policy, or about how we handle your information, go to:
Om Healthcare Inc., operator of the Aayu OS platform.
Email support@aayuos.com
Telephone (312) 625-1889
Aayu OS, Om Healthcare Inc.
20330 N Deer Park Blvd, Suite 130
Deer Park, IL 60010
United States