Privacy Policy

1. Scope of This Privacy Policy

This Privacy Policy applies to:

• Our website(s) and marketing pages
• Demo requests, sales inquiries, and support interactions
• Product accounts and users of AIdMD Services
• AIdMD Insights Lite (including optional manual uploads)
• AIdMD Insights (previously AIdMD Insights Enterprise) and AIdMD EHR, except as limited by applicable customer agreements and HIPAA obligations

2. Information We Collect

We may collect the following categories of information, depending on how you use the Services.

A. Information You Provide to Us

• Contact information (name, work email, phone number, organization)
• Account information (username, password, role, profile details)
• Communications (messages submitted through forms, support requests, emails)
• Demo and sales information (practice size, use case, EHR environment, deployment needs)
• Content you submit through the Services, including: prompts/queries, uploaded files/documents, notes/drafts, configuration settings
• AIdMD Insights Lite uploads (if you manually upload documents or patient context)

B. Product and Usage Information

• Log and event data (IP address, browser type, device type, operating system)
• Authentication and session data
• Feature usage data (e.g., which tools are used, timestamps, performance metrics)
• Error logs, diagnostics, and crash reports
• Interaction data needed to provide and improve the Services

C. Clinical and Healthcare Data (Enterprise/EHR)

When our Services are used in clinical settings, we may process healthcare-related information, including PHI, as directed by our customers and subject to applicable agreements and law. This may include:

• Patient demographics
• Encounter documentation
• Chart/context data
• Medications, allergies, labs, and clinical history
• Orders/referrals/follow-up content
• Clinician-generated notes and drafts

D. Cookies and Similar Technologies

Cookies and similar technologies that are strictly necessary to operate and secure the website and to remember your preferences are always active. We also use Google Analytics (to understand website traffic and usage), the LinkedIn Insight Tag (to measure our advertising), and HubSpot (to understand website visits and contact inquiries). You can opt out of these analytics and advertising cookies at any time through the “Your Privacy Choices” link in the website footer, or through your browser settings.

3. How We Use Information

We may use information for the following purposes:

To Provide and Operate the Services

• Create and manage accounts
• Authenticate users and control access
• Deliver product features (e.g., AI scribe, AI chat, insights, workflow actions)
• Process inputs, uploads, and outputs
• Integrate with customer systems (for AIdMD Insights and AIdMD EHR)

To Support Customers and Respond to Requests

• Respond to inquiries, demos, and support tickets
• Troubleshoot issues
• Provide onboarding and implementation assistance

To Improve, Maintain, and Secure the Services

• Monitor performance and reliability
• Detect, prevent, and investigate fraud, abuse, or security incidents
• Debug errors and improve usability
• Develop and improve product features and operational processes

To Communicate With You

• Send service-related notices (security, maintenance, product updates)
• Send administrative messages
• Send marketing communications (where permitted by law and based on your preferences)

To Comply With Law and Enforce Rights

• Meet legal, regulatory, and compliance obligations
• Enforce our terms, agreements, and policies
• Protect rights, safety, and security of AIdMD, our customers, users, and others

4. How We Disclose Information

We may disclose information in the following circumstances:

A. Service Providers and Vendors

We may share information with vendors that help us operate the Services, such as providers of cloud hosting and infrastructure, analytics and monitoring, customer support tools, communication tools, security services, and implementation/integration support. These providers are authorized to process information only as needed to perform services for us and subject to contractual restrictions.

B. Customer Organizations (Enterprise/EHR)

If you use AIdMD through a healthcare organization, practice, or employer, certain information may be accessible to that organization and its authorized administrators and users, consistent with their role-based permissions and policies.

C. Integrations and Customer-Directed Disclosures

For AIdMD Insights and AIdMD EHR, we may process and transmit data to/from customer-authorized systems (e.g., EHRs or other clinical systems) at the customer's direction.

D. Legal and Safety Reasons

We may disclose information if required by law or if we reasonably believe disclosure is necessary to comply with legal process, respond to lawful requests from public authorities, protect rights, property, or safety, or investigate fraud, abuse, or security incidents.

E. Business Transfers

We may disclose information in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, subject to applicable confidentiality and legal obligations.

5. AI and Data Use

AIdMD provides AI-enabled features as part of the Services.

Clinical Oversight

AIdMD is designed to support clinicians and clinical workflows. Outputs may require clinician review and approval before use in documentation, actions, or orders.

PHI and Model Training

AIdMD does not use patient data or PHI to train public AI models.

If AIdMD uses de-identified, aggregated, or non-PHI data for product improvement, benchmarking, or analytics, we do so in accordance with applicable law, contracts, and technical/organizational safeguards.

6. Data Retention

We retain information for as long as necessary to provide the Services, fulfill the purposes described in this Privacy Policy, comply with legal obligations, and resolve disputes and enforce agreements.

Retention periods vary depending on the type of data, the product used (Lite / Enterprise / EHR), customer contracts and instructions, legal and regulatory requirements, and backup and security practices. Where applicable, we may delete or de-identify information when it is no longer needed.

7. Security

We implement administrative, technical, and physical safeguards designed to protect information, including measures such as:

• Encryption in transit and at rest (where applicable)
• Access controls and role-based permissions
• Logging and monitoring
• Secure development and operational practices

No system can guarantee absolute security. If you believe your account or data may be compromised, contact us immediately at admin@aidmdusa.com or contact@aidmdusa.com.

8. Your Choices and Rights

Depending on where you live and the nature of your relationship with AIdMD, you may have certain rights regarding personal information, such as the right to:

• Access
• Correct
• Delete
• Restrict or object to certain processing
• Request portability (where applicable)
• Opt out of marketing communications

Marketing Communications

You may opt out of marketing emails by using the unsubscribe link in our messages or by contacting us at privacy@aidmdusa.com. We may still send service-related communications.

Product/Clinical Data Requests

If your information is controlled by a healthcare provider, practice, or enterprise customer (including PHI), please direct your request to that organization first. We may assist our customers in responding to lawful requests as required by contract and law.

9. Cookies and Analytics Choices

You can manage cookies through your browser settings, or opt out of analytics and advertising cookies at any time through the “Your Privacy Choices” link in the website footer.

10. Children's Privacy

Our Services are intended for healthcare organizations, clinicians, and authorized users, and are not directed to children for independent use. We do not knowingly collect personal information directly from children in contexts where such collection is prohibited by law.

11. International Data Transfers

If you access the Services from outside the United States, your information may be processed in the United States or other jurisdictions where we or our service providers operate, subject to applicable safeguards and legal requirements.

12. Region-Specific Disclosures

Depending on your audience, additional disclosures may apply for California (CCPA/CPRA), Virginia, Colorado, Connecticut, Utah and other U.S. state privacy laws, EU/EEA / UK GDPR, and Canada (PIPEDA / provincial laws). If applicable, please contact us for information specific to your jurisdiction.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last Updated” date and take additional steps as required by law (such as posting a notice or notifying users).

14. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at:

AIdMD Technologies, Inc.
1111b South Governors Avenue Suite 99824
Dover, DE 19904, US
Email: info@aidmdusa.com
Security: admin@aidmdusa.com
Website: www.aidmdusa.com