Privacy Policy

Anxya Health is a product operated by Anxya Tech Private Limited (CIN: U62099PN2024PTC230490) (“Anxya”, “we”, “us”), a company incorporated in India. This policy explains what personal data we collect, why, how long we keep it, and the rights you have. We are the data controller for personal data processed through the Service. For any privacy request, contact privacy@anxya.health.

We collect only what we need to run the Service. Categories:

When you attach a document to a build, assessment or query, we extract text (and, for images, the image itself) and send it to our AI sub-processors so the model can produce the output you asked for. Your uploads are stored in your account and are visible only to you (and members of a workspace you share with).

We do not automatically redact personal or sensitive information from your uploads. Please do not upload another person’s health records or other sensitive data unless you are authorised to do so. You can delete an upload at any time, which removes it from your account. We do not use your uploaded content or generated outputs to train our own models; AI providers process it under their terms solely to return your result.

Depending on where you live, you have the following rights. To exercise any of them, email privacy@anxya.health and we will respond within the timeframe required by your local law.

We share the minimum necessary data with vetted service providers who process it on our behalf under contract. We do not sell your personal data.

We retain personal data only as long as needed for the purposes above or as required by law.

We are based in India and use sub-processors that may process data in the United States, the EU and other regions. Where data is transferred across borders, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs), adequacy decisions, or your consent, as applicable.

We use essential cookies for login, sessions and security, and preference storage for your theme and choices. We use first-party usage analytics to improve the product; any optional analytics cookies are set only if you choose “Accept all” in the cookie banner. We do not use third-party advertising or cross-site tracking. See our Cookie Policy.

We protect your data with encryption in transit, hashed passwords, httpOnly session cookies, role-based access controls, de-identification for research cohorts, and access logging. No system is perfectly secure, but we work continuously to safeguard your information and will notify you and regulators of a breach where the law requires.

Anxya Health is not directed to children. You must be at least 18 years old to create an account. We do not knowingly collect personal data from children; under the India DPDP Act, processing a minor’s data requires verifiable parental consent, which our consumer Service does not support. If you believe a child has provided us data, contact us and we will delete it.

If you are a pharma, hospital, payer or provider customer processing personal or health data through Anxya on behalf of your organisation, a separate Data Processing Agreement (and, where PHI is involved, a Business Associate Agreement) applies — view & download the DPA/BAA. Request a countersigned copy at privacy@anxya.health.

We may update this policy from time to time. We will change the “Last updated” date only for substantive changes and, where required, notify you. Continued use after an update means you accept the revised policy.

Questions, requests or complaints? Our Data Protection Officer (GDPR) is Nagesh Jadhav — nag@anxya.health. For general privacy requests and our India DPDP Grievance Officer, contact privacy@anxya.health, Anxya Tech Private Limited (CIN: U62099PN2024PTC230490), Pune, Maharashtra, India. EEA/UK users may also lodge a complaint with their local supervisory authority.