This policy explains what information ZuraMedOps collects, how it's used, and the specific protections that apply to Protected Health Information (PHI) across every module of the platform.
This Privacy Policy applies to ZuraMedOps and its connected modules — ZuraHMS, Zura360, ZuraSOAP, ZuraScheduler, ZuraCurodex, ZuraInsight, ZuraRCM, ZuraEngage and ZuraPortal — operated by Aryabh Corp (USA). It covers the marketing website at zuramedops.com and the platform itself when deployed for a healthcare organization.
We draw a clear line between two categories of data: account and website information (covered by this policy), and Protected Health Information (PHI) entered into the platform by a covered entity, which is governed by HIPAA and the Business Associate Agreement (BAA) executed with that organization.
Contact, account and usage information is used to respond to inquiries, schedule and run demos, provision and support accounts, secure the platform, and improve the product and this website. We do not sell personal information.
When a healthcare organization deploys ZuraMedOps, Aryabh Corp acts as a Business Associate under HIPAA. Every covered-entity customer receives a signed Business Associate Agreement (BAA) as part of onboarding, before any patient data is imported, defining our responsibilities as a data processor. PHI entered by that organization is used only to provide, secure and support the platform on its behalf, and is never used for marketing or sold to any third party. See our Security & HIPAA page for the technical and administrative safeguards that apply.
Data is encrypted in transit (TLS 1.3+) and at rest (AES-256), access is role-based and auditable, and every interaction is logged in an immutable audit trail. Full detail is on our Security & HIPAA page.
Account and website contact data is retained for as long as needed to provide the service or respond to your inquiry, and deleted or anonymized thereafter. PHI is retained according to the retention schedule agreed with each covered-entity customer and applicable state and federal record-keeping requirements.
You can ask us to access, correct, or delete the contact and account information we hold about you, or opt out of marketing communications at any time, by reaching us through Contact us. If you are a patient of an organization using ZuraMedOps, requests about your health records should go directly to that provider, who controls your PHI as the covered entity. Residents of California and other states with specific privacy laws (e.g. CCPA/CPRA) may have additional rights, which we honor on request.
Our website is intended for healthcare organizations and is not directed at children. Pediatric patient records entered into the platform by a provider are protected as PHI under the provider's own BAA with us.
We may update this policy as our practices evolve. Material changes will be reflected by updating the date at the top of this page.
Questions about this policy can be sent to support@aryabhcorp.com or through our Contact us page.
Reach out and we'll get back to you directly.