Privacy Policy

Last updated: January 1, 2025

1. Information We Collect

• Account info: name, email, role, organization ID (no SSN, DOB, or personal health data).
• Clinical data: encounter notes, billing codes, follow-up tasks you enter.
• Usage data: feature interactions, error logs (no PHI in analytics).
• Voice recordings: processed for transcription, then immediately deleted.

2. How We Use Your Information

To provide and improve the Service; to communicate with you about your account; to ensure security and prevent fraud; and to comply with legal obligations.

3. PHI Handling

All PHI is encrypted in transit (TLS 1.3) and at rest (AES-256). PHI is never used for AI model training or shared with third parties except as required to provide the Service.

4. Data Retention

Clinical records: 7 years (HIPAA minimum). Voice recordings: deleted immediately after transcription. Audit logs: 6 years.

5. Your Rights

Request access, correction, or deletion: privacy@notafid.com, or via Export / Delete Account in the app's Settings.

6. Business Associate Agreement

A BAA is available for all paid plans. Contact sales@notafid.com.

7. Changes to This Policy

Material changes will be communicated by email or in-app notice at least 30 days before they take effect.

8. Contact

privacy@notafid.com · See also our Terms of Service.