Privacy Policy

1. Introduction

Medellis ("we", "our", "us") is committed to protecting the privacy and security of your personal information and Protected Health Information (PHI). This Privacy Policy describes how we collect, use, store, and protect information when you use our clinical documentation service.

2. Information We Collect

Account Information

• Name and professional credentials
• Email address
• Medical specialty
• NPI number (optional)

Clinical Data

• Audio recordings of clinical encounters
• Transcriptions of recorded encounters
• Generated clinical notes
• Patient identifiers you provide (name, MRN)

3. How We Use Information

We use collected information to:

• Provide and improve our clinical documentation services
• Process audio recordings and generate transcriptions
• Create AI-assisted clinical notes
• Maintain and secure your account
• Communicate with you about the Service

4. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption in transit (TLS 1.3) and at rest (AES-256)
• Regular security audits and vulnerability assessments
• Access controls and authentication requirements

5. Data Retention

Audio recordings are deleted after 72 hours of processing. Clinical notes and transcriptions are retained for the duration of your account. You may request deletion of your data at any time.

6. Your Rights

You have the right to:

• Access your personal information
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format

7. Contact

For privacy-related inquiries, please contact our Privacy Officer at privacy@medellis.com.