Privacy Policy
This policy explains how Om Healthcare Inc., operator of Aayu OS, handles information collected through aayuos.com, account registration, business onboarding, and operation of the Aayu platform.
Scope and HIPAA
This policy covers website visitors, people who contact Aayu, account applicants, and business contacts at participating or prospective practices and pharmacies.
When Aayu creates, receives, maintains, or transmits protected health information on behalf of a participating practice, Aayu acts as the practice's business associate and handles that information under the parties' Business Associate Agreement and applicable HIPAA obligations.
Participating pharmacies receive information needed to evaluate and fulfill transactions in their own capacity as regulated healthcare entities. Their handling of information is governed by their own legal obligations and privacy practices.
Information we collect
Depending on how you use Aayu, we may collect:
- Contact, role, and organization information
- Practice or pharmacy business information
- Professional, licensure, NPI, prescriber, credentialing, and verification information
- Account credentials and access information
- Product interests, approximate volume, and business communications
- Patient, prescription, order, office-use, shipping, pharmacy, and support information submitted through authorized platform workflows
- Payment and billing information processed through Stripe
- Agreements, consents, approvals, and communication records
- Device, browser, IP address, authentication, application, security, and audit information
Do not submit patient information through public forms or ordinary email.
How we use information
We use information to:
- Respond to inquiries
- Create and administer accounts
- Verify organizations, prescribers, users, and payment methods
- Review and approve participation
- Present available products, prices, pharmacies, and shipping choices
- Route and administer transactions
- Process and reconcile payments
- Display available order and shipping status
- Provide support and coordinate with pharmacies
- Secure and improve the service
- Maintain required records
- Comply with legal, contractual, regulatory, tax, and audit obligations
- Establish, exercise, or defend legal claims
- Send operational and permitted marketing communications
How information is disclosed
Information may be disclosed to:
- Participating pharmacies as needed to evaluate and fulfill transactions
- Microsoft Azure as Aayu's infrastructure provider
- Stripe as Aayu's payment processor
- Other verified service providers needed to operate and secure the platform
- Professional advisers under appropriate obligations
- Authorities when legally required or necessary to protect rights or safety
- A successor in connection with a financing, merger, acquisition, reorganization, or asset sale
Payment information
Payment processing is handled through Stripe. Aayu receives the transaction and payment-status information needed to administer the service.
Security
Aayu maintains safeguards designed to protect information based on its sensitivity and use. No service can promise absolute security.
Report suspected unauthorized access to support@aayuos.com. Do not include patient information in ordinary email.
Retention
Aayu keeps information for as long as reasonably necessary to provide the service, administer the relationship, meet legal, contractual, regulatory, tax, audit, and security obligations, and resolve disputes.
Protected health information is retained, returned, or destroyed under the applicable Business Associate Agreement, participation agreement, and legal requirements.
Choices and rights
You may contact Aayu to request access to, correction of, or deletion of personal information, subject to identity verification, organizational authority, applicable law, and required retention.
Patients seeking access to or correction of clinical or pharmacy records should contact the applicable practice or pharmacy. Aayu supports participating practices as required by the Business Associate Agreement.
Marketing recipients may unsubscribe using the method provided in the message. Operational and transaction messages may still be sent while an account or transaction remains active.
Children
The public website and business platform are intended for healthcare organizations and authorized adult users. Patient information about minors may be processed only through authorized practice and pharmacy workflows as permitted by law and applicable agreements.
Contact
Om Healthcare Inc.
20330 N Deer Park Blvd, Suite 130
Deer Park, IL 60010
United States