Privacy
‍

Privacy Policy for MediScan AI

Effective Date: May 22, 2024

At MediScan AI, we are dedicated to safeguarding your privacy and ensuring the security of your personal information. This privacy policy outlines our practices regarding the collection, use, sharing, and protection of your information when you use our services.

‍

Definitions

• Personal Information: Any information that identifies or can be used to identify an individual, such as names, contact details, etc.
• Medical Information: Information related to an individual's health, medical history, treatment, or diagnosis.
• Technical Information: Data collected automatically, including IP addresses, device information, etc.

‍

Your California Privacy Rights (CCPA Compliance)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request to know what personal information we collect, how we use it, and with whom we share it.
• Right to Delete: You may request the deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out: If we sell or share your personal information, you have the right to opt-out. (Note: MediScan AI does not sell personal information.)
• Right to Non-Discrimination: We will not deny you services, charge different prices, or provide a different level of service if you exercise your CCPA rights.

To exercise these rights, please contact us at compliance@mediscan.ai.

Categories of Personal Information We Collect‍

Under CCPA guidelines, we collect the following categories of personal information:

• Identifiers: Name, contact details.
• Medical Information: Patient records, diagnostic reports.
• Internet Activity: IP addresses, device details, browser type, and usage data.
• Commercial Information: Payment and transaction history (if applicable).
• Professional Information: Medical professionals’ credentials and affiliations.

We collect this information through direct user input, from healthcare providers, and through automated means.

‍

How We Use Your Information

We utilize the information we collect for the following purposes:

• Providing and customizing services to meet your needs.
• Enhancing the quality and functionality of our products and services.
• Fulfilling legal obligations and regulatory requirements.
• Communicating with users regarding service updates or important notices.
• Safeguarding against unauthorized access, fraud, or misuse.
• Conducting research and development to improve our offerings.

‍

Information Sharing and Disclosure

We do not sell your personal information. However, we may share your information in the following circumstances:

• With healthcare providers for patient care and treatment.
• With trusted third-party service providers who assist us in delivering our services.
• In response to valid legal requests, court orders, or regulatory obligations.
• In connection with corporate transactions, such as mergers or acquisitions.

We employ stringent security measures to ensure the confidentiality and protection of shared information.

‍

Business Associate Agreements (BAAs)

When medical providers or businesses providing services to medical providers use our technology, we request Business Associate Agreements (BAAs) to ensure compliance with HIPAA and other healthcare privacy laws.

‍

Data Retention

We retain active customer data for as long as the user maintains an account with us. Users can delete their data from within their account settings at any time. Upon account termination, data is securely deleted within 90 days unless otherwise requested by the client.

‍

Security Measures
We implement technical, administrative, and physical safeguards to protect your information from unauthorized access, misuse, or loss. These measures include encryption, secure access controls, and routine audits.

‍

International Data Transfers & GDPR Disclaimer
MediScan AI is not designed for users in the European Union (EU), the European Economic Area (EEA), or the United Kingdom (UK) and does not comply with the General Data Protection Regulation (GDPR). If you are located in Europe, please do not use our services.

Your information may be transferred to and processed in jurisdictions outside of your country of residence. We ensure that such transfers comply with applicable U.S. data protection laws and that adequate safeguards are in place.

Children's Privacy
We do not knowingly collect personal information from children under the age of 13 without verifiable parental consent. If you believe that we have inadvertently collected information from a child without proper consent, please contact us immediately.

Changes to This Privacy Policy
We may update this privacy policy periodically to reflect changes in our practices or legal requirements. Significant revisions will be communicated to users through appropriate channels.

Contact Us
For any questions, concerns, or privacy requests, contact our privacy team at:
Email: compliance@mediscan.ai

‍