Ekline Claims

Privacy policy

Last updated 14 November 2026

Ekline Claims is a software service of Ekline Health, a brand of Jeevan Rekha Global Ventures Pvt Ltd, West Bengal, India ("Ekline", "we"). This policy explains what personal data Ekline Claims handles, why, and the choices you have. It applies to the web portal, its API, the Ekline Connect desktop app and the public website.

Who decides how patient data is used

Hospitals and other healthcare providers that subscribe to Ekline Claims ("the hospital") decide why and how their patients' data is processed. Under the Digital Personal Data Protection Act, 2023 the hospital is the Data Fiduciary and Ekline processes patient data only on the hospital's instructions, as its Data Processor. For data about our own customers and website visitors (for example a demo request), Ekline is the Data Fiduciary.

What we collect

Account data: name, work email, mobile number, role, hospital or branch, sign-in history and device details.
Claim data uploaded by the hospital: patient name, UHID, policy and TPA details, admission and discharge papers, bills, investigation reports and other documents in the claim file.
Usage data: pages opened, actions taken, errors, and the audit log of every view, download, upload and change.
Payment data: invoices, coin purchases and payment references. Card and bank details are handled by the payment gateway and never stored by Ekline.
Support data: tickets, chat messages and, if you agree to share your screen with an Ekline executive, the recording of that session.
Website data: details you type into forms such as Book a demo, and essential cookies.

Why we use it

To run the service: audit claim files, track claims, draft letters, send emails and WhatsApp messages the hospital asks for, and keep claims moving to payment.
To keep accounts secure: two-step sign-in, single-session control, fraud and misuse checks, and the tamper-evident audit log.
To bill the subscription, coins and add-ons, and to send renewal and service notices.
To support users and improve quality. Screen-share recordings are used only for quality and training, and are deleted after 30 days.
To meet legal duties, such as tax records and lawful requests from authorities.

We do not sell personal data, show advertising inside the portal, or use patient data to train AI models.

AI processing

To read and audit claim files, Ekline Claims sends the relevant pages to the AI provider the hospital or Ekline has chosen (currently Google Gemini, NVIDIA NIM, Groq or Chutes). Pages are sent over encrypted connections, only for the duration of the request, and under the provider's API terms that do not allow training on customer data where the provider offers that option. Hospitals on their own AI keys deal with their provider directly.

Service providers that help us run Ekline Claims: hosting, email delivery, WhatsApp messaging (AiSensy), payment gateways, courier partners the hospital books, and the AI providers above. Each receives only what its task needs.
Insurers, TPAs and government schemes, only when a hospital user sends a document to them from the portal.
Authorities, when the law requires it.

Where data is stored and how it is protected

Data is stored in India-based or hospital-chosen servers. Files and secrets are encrypted at rest (AES-256), connections use TLS 1.2 or later, each hospital's data is kept separate, access is role-based, and every action is written to an audit log that cannot be edited. Encrypted backups are taken daily.

How long we keep it

Claim files are deleted a set number of days after the claim is marked "Payment received" (30 days by default, longer with the data retention add-on).
Hospital data is kept while the subscription is active and for one year after it ends, so the hospital can renew or export it. After that it is deleted, except records we must keep by law (such as invoices).
Screen-share recordings are deleted after 30 days. Audit logs are kept for at least 3 years.

Your rights

Patients should contact their hospital, which can correct, export or erase their data from the portal. Users and customers can ask Ekline to access, correct or erase their own data, withdraw consent, or name a nominee, under the DPDP Act. We reply within 30 days.

Grievance officer

Questions or complaints about privacy can be sent to the Ekline grievance officer through Help > Support in the portal or at the contact details on the website. If you are not satisfied, you may approach the Data Protection Board of India.

Changes

We will post any change here with a new date, and tell hospital admins inside the portal before a significant change takes effect.