Privacy Policy

Effective Date: January 1, 2026
Last Reviewed: July 1, 2026

1. Information We Collect

We collect information that you provide directly to us, as well as information collected automatically through your use of our platform:

• Account Information: Name, email address, phone number, BMDC number, and professional credentials
• Medical Information: Prescriptions, patient records, diagnoses, and treatment histories
• Technical Information: IP address, browser type, device information, and usage logs
• Communication Information: Messages, support requests, and feedback you provide

Healthcare Professionals

Professional credentials, license numbers, clinic affiliations, and practice information.

Patients

Medical history, prescriptions, diagnoses, and treatment records shared by healthcare providers.

System Data

Usage patterns, feature interactions, performance metrics, and error logs.

Communication

Email correspondence, chat messages, support tickets, and feedback.

2. How We Use Your Information

We use your information to provide, maintain, and improve our services:

• Core Services: Process prescriptions, manage patient records, and facilitate healthcare delivery
• Account Management: Create and manage user accounts, authenticate access, and maintain security
• Communication: Send notifications, respond to inquiries, and provide customer support
• Improvement: Analyze usage patterns, enhance features, and optimize user experience
• Legal Compliance: Comply with applicable laws, regulations, and healthcare standards

3. Data Protection and Security

We implement comprehensive security measures to protect your data:

• Encryption: Data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Control: Role-based access control with multi-factor authentication
• Monitoring: 24/7 security monitoring and threat detection
• Backup: Regular encrypted backups with disaster recovery plans
• Compliance: HIPAA, GDPR, and healthcare data protection standards

4. Information Sharing

We do not sell your personal information. We may share information in these limited circumstances:

• With Your Consent: When you explicitly authorize sharing
• Healthcare Continuity: With other healthcare providers for treatment purposes
• Service Providers: With trusted partners who assist in our operations (under strict confidentiality)
• Legal Requirements: When required by law, regulation, or legal process
• Protection: To protect the rights, property, or safety of our users or others

5. Data Retention

We retain personal data only as long as necessary:

• Active Accounts: Data retained while your account is active and in use
• Inactive Accounts: Data retained for 24 months after account becomes inactive
• Medical Records: Retained in accordance with healthcare record retention requirements
• Legal Obligations: Extended retention may apply for legal and regulatory compliance
• Anonymization: Data may be anonymized and retained for analytical purposes

6. Your Rights and Choices

You have the following rights regarding your personal data:

• Access: Request access to your personal data and how we process it
• Correction: Request corrections to inaccurate or incomplete data
• Deletion: Request deletion of your data (subject to legal requirements)
• Restriction: Request limited processing of your data
• Portability: Request your data in a portable, machine-readable format
• Objection: Object to processing for specific purposes
• Consent Withdrawal: Withdraw consent for processing at any time

7. Cookies and Tracking

We use cookies and similar technologies to enhance your experience:

• Essential: Required for platform functionality and security
• Preferences: Remember your settings and preferences
• Analytics: Understand how you use our platform
• Performance: Monitor and improve platform performance

You can manage cookie preferences through your browser settings. For more details, see our Cookie Policy.

8. International Data Transfers

Your data may be transferred to and processed in countries outside your jurisdiction. We ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions for countries with sufficient protection
• Binding Corporate Rules (BCRs) where applicable
• Data Processing Agreements with all international partners

9. Children's Privacy

Our platform is designed for healthcare professionals and adult users. We do not knowingly collect personal information from individuals under the age of 18. If you believe we have collected such data, please contact us immediately.

10. Updates to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes through:

• Platform notifications or announcements
• Email notifications (for account holders)
• Updated date at the top of this policy

11. Contact Us

For privacy-related questions, concerns, or to exercise your rights, please contact our Data Protection Officer. We will respond to your inquiry within 30 days.