Privacy Policy

Introduction

MediDash ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our medical practice management software and related services (collectively, the "Service").

Please read this Privacy Policy carefully. By accessing or using our Service, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy.

Information We Collect

We may collect several types of information from and about users of our Service, including:

• Personal Information: This includes information that can be used to identify you, such as your name, email address, postal address, phone number, and professional credentials.
• Practice Information: Information about your medical practice, including practice name, address, specialty, and staff information.
• Patient Information: Information about your patients that you input into the Service, including personal and health information protected under HIPAA.
• Usage Data: Information about how you use our Service, including log data, device information, and analytics data.
• Payment Information: Information necessary to process your payments, such as credit card numbers and billing addresses.

How We Use Your Information

We may use the information we collect for various purposes, including:

• To provide, maintain, and improve our Service
• To process transactions and send related information
• To send administrative information, such as updates, security alerts, and support messages
• To respond to your comments, questions, and requests
• To provide customer support
• To monitor usage patterns and analyze trends
• To protect the security and integrity of our Service
• To comply with legal obligations

HIPAA Compliance

As a provider of services to healthcare organizations, we understand the importance of protecting patient health information. We are committed to maintaining compliance with the Health Insurance Portability and Accountability Act (HIPAA) and other applicable laws and regulations.

When you use our Service to store or process Protected Health Information (PHI), we act as a Business Associate as defined by HIPAA. We will enter into a Business Associate Agreement (BAA) with Covered Entities as required by HIPAA.

Data Security

We implement appropriate technical and organizational measures to protect the security of your personal information. However, please be aware that no method of transmission over the Internet or method of electronic storage is 100% secure.

Our security measures include:

• Encryption of data at rest and in transit
• Regular security assessments and audits
• Access controls and authentication requirements
• Employee training on security and privacy practices
• Physical and environmental safeguards for our servers and facilities

Data Retention

We will retain your information for as long as your account is active or as needed to provide you with our Service. We will also retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

Your Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• The right to access the personal information we have about you
• The right to request correction of inaccurate personal information
• The right to request deletion of your personal information
• The right to restrict or object to processing of your personal information
• The right to data portability
• The right to withdraw consent

To exercise these rights, please contact us using the information provided in the "Contact Us" section below.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, please contact us at:

MediDash
123 Medical Drive, Suite 200
Boston, MA 02110
Email: privacy@medidash.com
Phone: +1 (555) 123-4567