Privacy Policy

1. Introduction

Autosapien (Pvt) Ltd ("Autosapien," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (autosapien.com) and use our products and services. XEHR, RCM Employee, and BetterCompliant were developed by Autosapien for XEHR LLC, on order from XEHR LLC.

We build AI and robotics technologies including healthcare platforms that handle sensitive data. We take our responsibility to protect this data extremely seriously, applying industry-leading security standards across all operations.

2. Information We Collect

Personal Information

When you interact with our services, we may collect:

• Name, email address, and contact information
• Company name and job title
• Billing and payment information
• Communication records when you contact us
• Account credentials for our platforms

Protected Health Information (PHI)

PHI in XEHR and RCM Employee is handled by XEHR LLC, which owns those products, under Business Associate Agreements (BAAs) with the practices that use them. Autosapien builds the products to HIPAA standards, and PHI is never used for marketing, advertising, or any purpose beyond providing healthcare services.

3. How We Use Your Information

• Providing, operating, and maintaining our products and services
• Processing transactions and sending related communications
• Improving and personalizing our services through analytics
• Responding to inquiries and providing customer support
• Complying with legal obligations including HIPAA requirements
• Sending product updates and service notifications (with your consent)

4. Data Sharing & Disclosure

We do not sell your personal information. We may share data with:

• Service providers who assist in operating our platforms (under strict contractual obligations)
• Healthcare entities as required to provide clinical services (under BAAs)
• Legal authorities when required by law or to protect our rights
• Business partners with your explicit consent

5. Data Security

We implement industry-standard security measures including AES-256 encryption at rest, TLS 1.3 in transit, role-based access controls, continuous monitoring, and regular third-party security audits. The healthcare platforms we build are designed for HIPAA compliance and SOC 2 readiness.

6. Your Rights

You have the right to:

• Access, correct, or delete your personal data
• Opt out of marketing communications
• Request a copy of your data in a portable format
• Withdraw consent at any time
• File a complaint with a data protection authority

7. Contact Us

For privacy-related inquiries, contact us at privacy@autosapien.com.

Autosapien (Pvt) Ltd — Lahore, Pakistan