Privacy Policy
Last updated: January 1, 2024
Introduction
At Medaius, we take your privacy seriously. This Privacy Policy explains how we collect, use, and protect your personal information when you use our Electronic Health Record (EHR) platform.
Information We Collect
We collect information you provide directly to us, such as when you create an account, use our services, or contact us for support. This may include: • Personal information (name, email, phone number) • Professional information (medical license, clinic details) • Usage data and analytics • Patient health information (PHI) as permitted by law
How We Use Information
We use the information we collect to: • Provide and maintain our EHR services • Process transactions and send notifications • Respond to your questions and provide customer support • Improve our platform and develop new features • Comply with legal obligations and protect against fraud
HIPAA Compliance
Medaius is designed to comply with the Health Insurance Portability and Accountability Act (HIPAA). We serve as a Business Associate for covered entities and have implemented appropriate safeguards to protect Protected Health Information (PHI).
Data Security
We implement industry-standard security measures including: • End-to-end encryption for data in transit and at rest • Regular security audits and penetration testing • Access controls and authentication requirements • Employee training on privacy and security practices • Incident response procedures
Data Sharing
We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except: • As required by law or legal process • To trusted service providers who assist in operating our platform • In connection with a business transfer or acquisition • To protect our rights or the safety of others
Your Rights
You have the right to: • Access and review your personal information • Request corrections to inaccurate data • Request deletion of your data (subject to legal requirements) • Object to certain processing activities • Data portability where technically feasible
International Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.
Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us at [email protected]