Privacy Policy

Effective Date: February 5, 2026

MedAI ("we" or "us") is committed to protecting the privacy and security of our users' personal and health information. This policy explains what data we collect, how we use and protect it, and the rights of our users under applicable Indian laws.

1. Geographic Scope & Jurisdiction

2. Information We Collect

• Personal Information: Contact and account information such as name, professional title, email, mailing address, phone number, and login credentials.
• Health and Patient Data: Patient-related data (medical history, diagnoses, clinical notes) provided for medical coding purposes. We adhere to the "minimum necessary" principle.
• Usage and Technical Data: IP addresses, browser types, session logs, and technical identifiers collected via cookies and tracking technologies (e.g., analytics). Patient health information is excluded from these tracking tools.

3. Account Creation and Data Storage

• Healthcare professionals must create an account to use the service.
• Data is stored securely, encrypted at rest and in transit, and retained as long as the account is active or required by law.
• Cloud hosting environments meet industry-standard security requirements.

4. Data Storage and Processing Location

5. International Data Transfers

6. Use of Cookies and Tracking Technologies

• Essential cookies are used for login sessions and preferences.
• Analytics cookies measure site traffic without storing patient health information.
• Users can manage cookie preferences via browser settings.

7. Data Sharing and Third-Party Service Providers

• Service Providers: Trusted vendors (cloud, storage, etc.) process data under strict controls with appropriate data protection agreements.
• Legal/Safety: Disclosures may occur if required by law or to protect rights and safety.
• Consent: Data may be shared with explicit user consent.

8. Compliance with Indian Laws

9. Data Security Practices

• TLS/SSL encryption, firewalls, intrusion detection, and multi-factor authentication for administrative access.
• Regular vulnerability assessments and patch management.

10. Your Rights and Choices

• Account Access: Users can update or delete profile information.
• Data Access: MedAI assists providers in fulfilling user requests for their data records.
• Data Correction: Users have the right to request correction of their personal data.

11. Contact Information

For inquiries or exercising rights:

12. Updates to this Policy

We reserve the right to modify this Privacy Policy at any time. If a revision is material, we will try to provide at least 30 days' notice prior to any new terms taking effect. Changes will be notified via the platform or email. By continuing to access or use MedAI after those revisions become effective, you agree to be bound by the revised policy.