Last updated: July 8, 2026
This Privacy Policy explains what information asaanbil.com collects, how we use it, and the choices you have. It applies to the marketing site and the logged-in practice dashboard.
Account information — name, email, practice name, and role, provided when you sign up or are invited to a practice.
Practice, patient, and claim data — the information your practice enters to use the Service, which may include Protected Health Information (PHI) such as patient names, dates of birth, insurance details, diagnoses, and claim/denial records. This data is entered and controlled by your practice; we process it only to provide the Service.
Payment information — handled entirely by Stripe, Inc., our payment processor. We do not receive or store full card numbers.
Usage information — basic technical data such as browser type and pages visited, and session cookies needed to keep you signed in.
For practices that enter PHI, we act as a business associate under the Health Insurance Portability and Accountability Act (HIPAA). We sign a Business Associate Agreement (BAA) with covered-entity customers on request, and we use PHI only to provide, maintain, and support the Service — never for advertising, and never sold to third parties.
Safeguards include encryption of data in transit and at rest, role-based access within your practice's account so staff only see what their role permits, and audit logging of access to sensitive records. No method of transmission or storage is 100% secure, but we design the Service around minimizing who can see PHI and why.
We use a small number of infrastructure providers (sub-processors) to run the Service: Supabase for database hosting, authentication, and file storage, and Stripe for payment processing and sales tax calculation. These providers only receive the data needed to perform their function and are bound by their own confidentiality and security obligations. We do not sell practice or patient data, and we do not share it with insurers, employers, or data brokers.
We retain practice and patient data for as long as your account is active, or as needed to comply with legal and record-keeping obligations. On request, or when an account is closed, we will delete or return your data within a reasonable period, subject to any retention required by law.
You can access, correct, or request deletion of information tied to your account by contacting hello@asaanbil.com. Requests concerning individual patient records should go through your practice, since your practice controls that data.
We use only the cookies necessary to keep you signed in and to remember basic preferences. We do not use third-party advertising or tracking cookies on the Service.
asaanbil.com is a business tool for healthcare practices and is not directed at, or knowingly used by, individual consumers or children.
If we make material changes to this policy, we'll notify account admins by email or in-app notice before the change takes effect.
Questions about this policy can be sent to hello@asaanbil.com.