Privacy policy

About this project

CashlessUndo is a free public information project. It is not presented as a registered company, firm, or other legal entity on these pages, and no registered office is published. For questions about this policy or about personal data you may have sent us, write to support@cashlessundo.com.

What we do not collect

We do not run third-party analytics, advertising, or social media trackers. We do not build advertising profiles of visitors, and we do not sell or share data with advertisers or data brokers.

We never ask for and never want your policy number, medical history, or details of a specific claim. Please do not send them to us. If you include them in a report or email by mistake, we will delete them when we notice.

Accounts

Most visitors never create an account. Sign-in exists so moderators can review corrections and keep the directory accurate. Account records hold an email address and authentication credentials for that purpose. Email verification and password reset are not enabled yet; there is no transactional email on this stack.

Cookies

We set no advertising or analytics cookies. Your light or dark theme preference is stored locally in your own browser so the site does not flash the wrong theme on the next visit. It never leaves your device and is not readable by us. Signed-in moderators also receive a session cookie required to stay signed in.

What is collected automatically

Like any website, hosting and security infrastructure process technical request data (IP address, user agent, requested URL, timestamp) to serve pages, block abuse and protect against denial-of-service attacks. This is standard infrastructure logging, retained for a limited period, and is not used to identify individuals for marketing.

When you submit a public report, hospital correction, or missing-hospital tip, we may store a salted hash of your IP address (not the address itself) so we can rate-limit abuse and tell distinct reporters apart when several people dispute the same record. Without a salt the hash would be reversible; with it, it is a pseudonym for abuse handling only.

We record aggregate counts of search terms so we can see which hospitals people look for and do not find. These are counts of terms, not of people, and are not linked to an IP address or any identifier.

Optional information you send us

Public forms let you leave an email address so a follow-up is possible. That address is optional, never published, and held only as long as needed to review the submission. The body of a report or correction may contain whatever you typed; we ask you not to include medical or policy details.

When you email support@cashlessundo.com, that message and your address are held only as long as needed to respond and to act on a correction. If your report leads to a change in the directory, the change is public but you are not identified as its source.

Where data is stored

Directory content is served from a global content network, which means copies of public pages may be cached in data centres outside India. The directory holds public information about hospitals and insurers compiled from publicly available sources; CashlessUndo does not own that underlying data, and those pages contain no personal data about visitors. Account, report, and moderation data are stored with the same infrastructure providers that host the application.

Access and deletion

Because almost nothing is held about anonymous visitors, there is usually nothing to access or delete. If you emailed us or left an address on a form and want that correspondence removed, write to support@cashlessundo.com.

If you are a hospital or insurer and believe information published about you is inaccurate, contact us: records are corrected on evidence; that is the point of the site.

Children

This site is intended for adults arranging treatment. It is not directed at children and we do not knowingly collect information from them.

Changes

If this policy changes materially, the updated date above changes with it. Since most visitors have no account, there is no individual notification.