Privacy Policy | OrsoMedical

1. Introduction

OrsoMedical ("we," "us," or "our") operates a fee-for-service medical information platform that provides AI-generated health information with optional licensed physician review. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

IMPORTANT: Our service is designed for de-identified, anonymous health questions only. You should NOT submit any personally identifiable health information (PHI) or protected health information.

2. Information We Collect

2.1 Information You Provide

Account Information: Email address and password when you create an account.
Health Questions: The medical questions you submit through our platform. These should be de-identified and contain no personal health information.
Payment Information: When you purchase services, payment is processed through Stripe. We do not store your full credit card information.

2.2 Information Automatically Collected

Device and browser information
IP address (anonymized)
Usage data and interaction with our services
Cookies and similar tracking technologies

3. De-Identified Questions Policy

Critical Privacy Requirement

You must NOT include any of the following in your questions:

Names (yours or others)
Dates of birth or ages that could identify you
Addresses or location information
Phone numbers or email addresses
Medical record numbers
Social Security numbers
Insurance information
Any other personally identifiable information

By submitting a question, you certify that it contains no personally identifiable information. If we identify PHI in your submission, we reserve the right to delete the question without refund.

4. How We Use Your Information

To provide and maintain our services
To process your questions and generate AI responses
To facilitate physician review of questions (for paid services)
To process payments and send transaction confirmations
To communicate with you about your account or services
To improve and optimize our services
To comply with legal obligations

5. AI Processing

Your de-identified questions are processed by artificial intelligence systems to generate initial responses. These AI systems are trained on medical literature and general health information. AI responses are:

Generated automatically based on your question
Not reviewed by a physician unless you purchase a physician review service
For educational and informational purposes only
Not a substitute for professional medical advice

6. Data Sharing and Disclosure

We may share your information with:

Service Providers: Third parties that help us operate our services (payment processors, hosting providers, AI services)
Physicians: Licensed physicians who review questions (for paid physician review services)
Legal Requirements: When required by law or to protect our rights

We do NOT sell your personal information to third parties.

7. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

Encryption of data in transit and at rest
Secure authentication systems
Regular security assessments
Limited access to personal information

8. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations. De-identified questions and responses may be retained indefinitely for service improvement purposes. You may request deletion of your account and associated data by contacting us.

9. Your Rights

Depending on your location, you may have the right to:

Access your personal information
Correct inaccurate information
Delete your information
Opt out of certain data uses
Data portability

10. HIPAA Notice

OrsoMedical is NOT a covered entity under HIPAA. Our service is designed for de-identified, educational health questions only. We do not provide medical treatment, diagnose conditions, or maintain medical records. No doctor-patient relationship is created through use of our services.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

OrsoMedical
Email: privacy@orsomedical.com

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.