Privacy Policy

RCM Smart is revenue cycle and claims management software provided by Genmeditech. This page explains what information the product handles and where it goes. If your organization has a signed agreement with Genmeditech, that agreement takes priority over this page.

This website

You can read the public pages of this site without an account. They carry no advertising or analytics trackers, and we do not set cookies. The scoring demo on the homepage runs in your browser, and nothing you enter in it is sent anywhere. Our hosting provider may keep standard request logs, such as IP addresses and the pages requested.

Information in the product

• Account details: your email address, role and time zone. Passwords are stored only as salted hashes.
• Claim data: the files your organization uploads, such as claim exports from an EMR, and the records built from them. These can contain patient and payment information.
• Work records: assignments, stage changes, outcomes, notes and help requests, with who made them and when.
• Credentialing records: provider details and documents your organization enters in the credentialing module. Sensitive fields are encrypted.

How it is used

We use this information to run the product for your organization: importing files, scoring and allocating claims, answering questions and producing reports. We do not sell it and we do not use it for advertising.

Outside services

• Amazon Web Services hosts the application and stores uploaded files.
• MongoDB Atlas hosts the database.
• OpenAI and Anthropic provide the language models behind the AI features: mapping columns and status values during import, indexing claims so they can be searched, and answering questions in Quick Insights and Data Studio. The text these features need, which can include claim details from your files, is sent to the provider to produce the result.
• Google Drive and Microsoft SharePoint are used only if you choose to import a file from them. You sign in with that provider and pick the file yourself.

Who can see it

Your organization controls access through roles and practice-level permissions. Patient names are hidden on screen by default unless your organization switches them on. Exported claim files include them. Administrators can view the app as a teammate to troubleshoot, under a banner that makes this visible.

Your browser

When you sign in, the product keeps your session in your browser’s local storage, along with preferences such as your theme and table settings. They stay on that device until you sign out or clear them.

Security

Traffic to the site uses HTTPS and uploaded files go to encrypted storage. Assignments, stage changes, help requests and outcomes are recorded in an audit log. No system is perfectly secure, so please tell your administrator straight away if you think your account has been misused.

How long it is kept

Your organization’s data stays in the product until your organization deletes it. A deleted practice moves to an archive and is removed permanently after 7 days. Copies can remain in backups until those backups are replaced.

Your choices

To see, correct or delete information about you, contact your organization’s administrator, who manages your account and your organization’s data.

Changes and questions

If this page changes, we will update the date at the top. If you use RCM Smart through your organization, your administrator is the first place to ask, and can reach Genmeditech directly. Our terms of use cover the rest of how the product may be used.