Privacy Policy

1. Information We Collect

We collect information to provide and improve our Service. The types of information we collect include:

a. Information Provided by Providers

• Provider Information: When you register for an account, we collect your name, email address, professional credentials, workplace information, and other details necessary to verify your identity and facilitate use of the Service.
• Documents and Encounters: Providers may upload documents (e.g., PDFs, text files, images) and input care update notes containing patient demographic and clinical data. Our AI extracts relevant information from these uploads to populate patient profiles.
• Internal Operational Tools: Content from provider-to-provider messages, referral requests, referral status updates, and all other workflow tools.

b. Patient Information

• Demographic Data: Information such as patient name, date of birth, gender, address, contact details, and insurance information extracted from uploaded documents.
• Clinical Data: Health-related information, including medical history, diagnoses, treatments, medications, and other clinical details derived from documents or added during encounters.

c. Automatically Collected Information

• Usage Data: Information about how you interact with the Service, such as logins, feature usage, and referral analytics.
• Device Information: IP address, device type, operating system, and unique device identifiers.
• Analytics: Aggregated data to monitor performance and improve the Service.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Patient Profile Creation: To extract and organize patient demographic and clinical data into profiles using AI technology.
• Service Delivery: To enable providers to add documents, record care updates, share patient profiles, send messages, manage referrals, and track referral statuses, and manage internal operations.
• Analytics: To provide operational analytics and insights to improve patient care coordination.
• Security: To protect the integrity and security of the Service and prevent unauthorized access.
• Compliance: To comply with legal obligations, such as maintaining records as required by healthcare regulations.
• Improvement: To enhance the functionality and performance of the Service, including refining our AI algorithms.

3. How We Share Your Information

We do not sell or rent your information. We may share information in the following circumstances:

• Among Providers: Patient profiles and related data may be shared with other authorized providers within the app for care coordination, referrals, or as permitted by law.
• Service Providers: We may share information with third-party vendors (e.g., cloud hosting, AI processing, or analytics providers) who assist us in operating the Service, subject to strict confidentiality agreements.
• Legal Requirements: We may disclose information if required by law, such as in response to a subpoena, court order, or to comply with healthcare regulations like HIPAA.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction, with safeguards to maintain confidentiality.

4. Data Security

We implement robust security measures to protect your information, including:

• Encryption of data in transit and at rest.
• Access controls to ensure only authorized providers can view or edit patient profiles.
• Regular security audits and updates to address vulnerabilities.
• Role based permissions.

Despite these efforts, no system is completely secure, and we cannot guarantee absolute protection against unauthorized access.

5. Your Rights and Choices

a. Provider Rights

• You can access, update, or delete your account information by logging into the app or contacting us.
• You control the documents and data you upload.

b. Patient Rights

• Patients have rights to access, correct, or request deletion of their personal health information under applicable laws (e.g., HIPAA). Providers using the Service are responsible for facilitating these requests.

c. Opt-Out

• You may deactivate your account at any time, though certain data may be retained as required by law.

6. Legal Compliance

We comply with applicable privacy and healthcare laws, such as:

• HIPAA (Health Insurance Portability and Accountability Act) for U.S. users, ensuring the protection of Protected Health Information (PHI).
• GDPR (General Data Protection Regulation) for EU users, where applicable.
• Other regional or national regulations as they apply.

Providers using the Service are responsible for obtaining patient consent and ensuring compliance with these laws when accessing or sharing patient data.

7. Data Retention

We retain information for as long as necessary to provide the Service or as required by law. Patient data shared between providers may be retained in accordance with healthcare record-keeping obligations. De-identified data may be kept indefinitely for analytics purposes.

8. Children’s Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we learn such data has been collected, we will take steps to delete it.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted in the app with a revised "Effective Date." Continued use of the Service after changes constitutes acceptance of the new terms.

10. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

• support@digitizedhealth.ai
• Atlanta, GA