1. Introduction
DrDocs ("we," "our," or "us") is committed to protecting your privacy and the privacy of your patients' protected health information (PHI). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our HIPAA-compliant healthcare documentation platform.
2. Information We Collect
2.1 Personal Information
- Name, email address, and contact information
- Professional credentials and organization details
- Account preferences and settings
2.2 Protected Health Information (PHI)
- Patient medical records and documentation
- Audio recordings of medical dictations
- Visit notes and clinical observations
- Time tracking and location data for patient visits
2.3 Technical Information
- Device information and operating system
- IP address and network information
- Usage analytics and performance data
- Security logs and audit trails
3. How We Use Your Information
We use the information we collect to:
- Provide and maintain our healthcare documentation services
- Process medical dictations and generate AI-powered summaries
- Ensure HIPAA compliance and data security
- Improve our services and develop new features
- Provide customer support and technical assistance
- Comply with legal and regulatory requirements
4. Information Sharing and Disclosure
We do not sell, trade, or rent your personal information or PHI to third parties. We may share information only in the following circumstances:
- With your explicit consent
- To comply with legal obligations or court orders
- To protect our rights, property, or safety
- With trusted service providers who assist in our operations (under strict confidentiality agreements)
- In case of a business transfer or merger
5. Data Security
We implement comprehensive security measures to protect your information:
- End-to-end encryption for all data transmission and storage
- AES-256-GCM encryption for PHI data
- Secure key management and access controls
- Regular security audits and vulnerability assessments
- HIPAA-compliant infrastructure and processes
6. Your Rights
You have the right to:
- Access and review your personal information
- Request corrections to inaccurate information
- Request deletion of your information (subject to legal requirements)
- Opt out of certain communications
- Request a copy of your data
7. HIPAA Compliance
DrDocs is designed to be HIPAA-compliant and includes all necessary safeguards for handling PHI. We have executed Business Associate Agreements (BAAs) with all relevant service providers and maintain comprehensive audit logs for all PHI access and modifications.
8. Data Retention
We retain your information for as long as necessary to provide our services and comply with legal obligations. PHI is retained according to applicable healthcare regulations and your organization's retention policies.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.
10. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
- Email: privacy@drdocs.com
- Phone: 1-800-DRDOCS
- Address: 123 Healthcare Drive, Medical District, MD 12345