Privacy Policy

Last updated: 10 July 2025

1. Introduction & scope

This Privacy Policy explains how Vitals Pay Private Limited ("VitalsPay", "we", "us") handles information when you use the VitalsPay application to verify a hospital bill against an insurance policy or to pre-check coverage for a planned procedure. Because VitalsPay processes hospital bills and insurance documents, the information involved can include sensitive personal and health-related data.

2. Information we collect

Documents you upload — hospital bills and insurance policy documents (PDF/JPG/PNG).
Text and structured fields extracted from those documents (line items, policy terms, dates, amounts).
Details you enter — e.g. planned procedure, city, hospital tier, room and stay details.
Any account details, only if a "save my results" feature is enabled and you choose to use it.

These may contain sensitive personal information and health-related data. We ask you not to upload documents belonging to someone else without their consent.

3. How we use it

We use this information solely to perform the verification or coverage estimate you request and to display the result to you. If you explicitly opt in to saving, we also use it to store your result so you can return to it. We do not use your documents for advertising or profiling.

4. Document retention

Uploaded documents and extracted data are kept only for your active session and are not stored persistently unless you explicitly choose to save them. Session data is discarded when your session ends. Where you have saved data, you may request its deletion at any time (see "Your rights"), and we will delete it within a reasonable period.

5. Third-party processing

If AI-based extraction is enabled, the text extracted from your documents may be sent to a third-party processing service, Anthropic, to convert it into structured data. We send only what is needed to perform extraction. See Anthropic's privacy policy for how they handle data. If AI extraction is disabled, parsing is performed locally and no document text is sent to a third-party processor.

6. Data sharing

We do not sell your data, and we do not share it with insurers, hospitals, third-party administrators, or advertisers. Data may be processed by service providers strictly to operate the app (such as the extraction provider named above), under appropriate safeguards.

7. Security

We apply reasonable technical and organizational measures designed to protect your information against unauthorised access, loss, or misuse, including:

Encryption in transit. All traffic between your browser and our servers is served over HTTPS/TLS.
Session-scoped handling. Uploaded bills and policies are processed for your active session and are not retained in a persistent store unless you explicitly choose to save them.
Data minimisation. When AI extraction is enabled, we send only the document content needed to read your bill and policy to our extraction provider, and no more than is required to produce your result.
Credential protection. API keys and other secrets are held as server-side environment secrets and are never exposed to the browser or embedded in client code.
Access controls. Access to systems that process your data is limited to those who need it to operate the service.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your rights

Subject to applicable law, you may have the right to access, correct, or delete your personal data, and to withdraw consent to processing. VitalsPay is designed around review-and-correct, so you can edit extracted terms before any result is produced. To exercise your rights, contact us using the details below.

9. Cookies & analytics

VitalsPay may use minimal cookies or local storage necessary for the app to function (for example, your theme preference). (Details of any analytics to be added here.)

10. Children's data

VitalsPay is not directed at children. We do not knowingly collect personal data from children. A bill for a child's treatment may be uploaded by a parent or guardian responsible for the claim.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected here with an updated "Last updated" date.

12. Contact

For privacy questions or to exercise your rights, contact Vitals Pay Private Limited at contactus@vitalspay.ai.