Effective Date: 02nd September 2024
This Privacy Policy outlines how ASIMITH by Swingbell Labs ("we," "us," or "our") collects, uses, and protects your personal data when you use our Electronic Health Record (EHR) platform integrated with the National Health Claims Exchange (NHCX) for claims processing. Our platform is designed to support interoperability and is compliant with the Ayushman Bharat Digital Mission (ABDM) standards.
This privacy statement applies only to our website. Our site might contain links to other sites. Please be aware that Swingbell Labs is not responsible for the privacy practices of such other sites. We encourage you to read the privacy statements of each and every website that collects personal or practice information from you.
• Healthcare Data: We collect and process healthcare data provided by patients through doctors and hospitals using our platform. This data is owned by the patients and is collected with their consent.
• Third-Party Services: Our platform utilizes third-party services, such as Amazon Web Services (AWS), for hosting and infrastructure. We do not collect personal data through these services but may use them for operational purposes.
• Data Collection and Usage for KYC and Verification: As part of our KYC process, we collect and process personal information, including Aadhaar details, to verify the identity of medical doctors using our Platform. This data is collected in compliance with the guidelines set forth by the Unique Identification Authority of India (UIDAI) and is used solely for the purpose of identity verification.
• Our Platform integrates with third-party services for: (a) Aadhaar-based KYC verification; (b) Contact information verification (mobile numbers, email addresses) and location tracking.
• We are committed to safeguarding your personal data and have implemented appropriate measures to protect it. For information on how third-party services handle your data, please refer to their respective privacy policies. Your data will be used in accordance with applicable data protection laws and regulations.
• Claims Processing: We use the collected data to facilitate the submission of insurance claims through the NHCX. This includes processing, managing, and securely transferring data as required.
• Interoperability: Our platform supports interoperability by integrating with ABDM-compliant gateways and APIs, allowing data to move between systems with patient consent.
• With Partners: We may collaborate with other organizations, service providers, or agencies to onboard doctors and hospitals. These partners will front-end the platform with a "Powered by Swingbell Labs" byline, but we remain responsible for the underlying software and infrastructure.
• Third-Party AI Tools: Our platform may include third-party AI tools for summarizing historical data. Users are advised to validate the outputs of these tools before relying on them for clinical or decision-making purposes. We are not responsible for the accuracy or reliability of these tools' outputs.
• Security Measures: We implement reasonable security measures to protect data within our systems. However, no system is entirely secure, and we cannot be held liable for data loss or breaches beyond our control.
• Third-Party Services: As our platform uses third-party services like AWS, we are not responsible for data loss or breaches occurring through these services.
The patient retains ownership of their healthcare data. We ensure that data is moved between systems only with the patient's consent.
• Regulatory Compliance: We adhere to guidelines, policies, and notifications from the National Health Authority, including data management policies and security regulations.
• Cybersecurity Incidents: We will report cybersecurity incidents and share related information in accordance with applicable laws and regulations.
We are not liable for any direct, special, incidental, consequential, or punitive damages arising from the use of our platform or any third-party services. Our total liability for any claims related to this Privacy Policy or the use of our platform shall not exceed the fees paid for the services during the preceding term.
In the event that Swingbell Labs undergoes a business transition, such as a merger, acquisition, or sale of all or part of its assets, your personal data may be transferred as part of the transaction. We will notify you before your data is subject to a new privacy policy. If the company ceases operations, we will provide reasonable notice and options to retrieve or transfer your data, where legally permissible.
In the event of a merger, acquisition, or sale involving an international entity, we will ensure that your personal data is transferred in compliance with applicable global data protection laws, including the General Data Protection Regulation (GDPR) for EU-based data. We will notify you of any changes to our privacy practices and provide options to manage or transfer your data if required. Our commitment is to safeguard your data throughout the transition process.
We may update this Privacy Policy from time to time. Any changes will be posted on our platform, and your continued use of our services constitutes acceptance of the updated policy.
For any questions or concerns regarding this Privacy Policy, please contact us at: