Privacy Policy

1. Commitment to Policyholder Confidentiality

ReclaimBill ("we", "us", or "our"), operating the platform https://reclaimbill.com, recognizes the sensitive nature of hospital bills, diagnostic categories, and medical expenses. This Privacy Policy outlines our data handling practices in strict compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

2. What We DO NOT Collect or Store

Unlike commercial aggregators or ad networks, ReclaimBill.com is engineered with a strict Privacy-by-Design architecture:

• No Permanent Medical Records: We do NOT store your uploaded bill PDFs, JPGs, or clinical diagnosis files in any permanent database or cloud storage bucket.
• No National Identifiers: We do NOT collect or store Aadhaar numbers, PAN numbers, voter IDs, or passport details.
• No User Account Mandatory Profiles: You are not required to create an account, provide a password, or link social media profiles to perform an audit.
• No Sale of Data: We NEVER sell, rent, monetize, or broker medical or personal data to insurance companies, pharmaceutical corporations, hospitals, or credit bureaus.

3. Technical Architecture: Ephemeral Memory (IMemoryCache)

When you upload a bill for audit:

• In-Browser Pre-Processing: Image deskewing, orientation correction, and text extraction are executed directly on the client side using HTML5 Canvas and client-side optical parsing.
• 30-Minute Ephemeral Sliding Cache: Intermediate audit payloads and generated line items reside strictly in server volatile RAM (managed by .NET IMemoryCache) with an automated 30-minute sliding expiration window.
• Automatic Memory Purge: Once the 30-minute session expires or upon manual reset, the audit session data is garbage-collected and permanently destroyed from server RAM.
• Anonymous Aggregation: Only anonymized, non-personal macro-level statistics (e.g., total rupees deducted across hospital brand categories for public transparency rankings) may be aggregated, containing zero claimant names, phone numbers, or invoice numbers.

4. Payment Data Security

Payment processing for the ₹199 statutory report fee is handled entirely by PCI-DSS Level 1 compliant, RBI-authorized payment aggregators (such as Razorpay). ReclaimBill.com does not view, collect, or store your credit/debit card numbers, CVVs, net banking credentials, or UPI MPINs.

5. Cookies & Tracking

ReclaimBill.com uses only essential, functional cookies required for language preference (e.g., remembering Hindi, Marathi, or English selection) and active audit session maintenance. We do not use third-party behavioral tracking cookies or advertising retargeting pixels.

6. Data Grievance Redressal Officer

In accordance with Section 8 of the Digital Personal Data Protection Act, 2023, and Rule 5(9) of the IT Rules, 2011, ReclaimBill has appointed a designated Data Protection & Grievance Officer to address any privacy inquiries or data concerns:

7. Amendments to this Policy

We may update this Privacy Policy periodically to reflect enhancements in data protection jurisprudence, notifications by the Data Protection Board of India, or amendments to IRDAI guidelines. Continued use of the platform constitutes acceptance of the current policy.