1. Scope of this policy
This Privacy Policy explains how Diagnosticy collects, uses, discloses, and protects information when you visit https://diagnosticy.com or use the Diagnosticy web application at https://app.diagnosticy.com.
The policy covers information related to website visitors, business contacts, registered accounts, invited team members, and support interactions.
If a doctor, clinic, or healthcare organization uses Diagnosticy to manage patient or clinical information, that organization remains responsible for the notices, consents, and permissions required by law for the data it uploads to the platform.
2. Information we may collect
- Account and contact details such as name, email address, organization, specialty, or role.
- Practice or clinic operating information such as workspace settings, forms, schedules, and invited users.
- Technical logs, service activity, approximate IP address, browser, device, and basic security events.
- Messages, tickets, and files you share when asking for support or requesting a demo.
- Billing and subscription details when you purchase a plan, usually processed by third-party payment providers.
- Clinical or document content that your organization chooses to upload for storage, access, or export through the platform.
3. How we use information
- To provide, maintain, and improve the website and application.
- To create accounts, authenticate users, and manage permissions.
- To respond to commercial, technical, and support requests.
- To detect abuse, fraud, errors, unauthorized access, or security incidents.
- To comply with legal, contractual, and accounting obligations.
- To produce aggregated or de-identified analytics that help us understand performance and service usage.
4. Clinical data and customer responsibilities
When a practice or professional uploads patient information, Diagnosticy processes that data under the customer's instructions so the service can host, organize, display, back up, and export it.
The customer is responsible for confirming it has a lawful basis to collect and use that information, for managing its authorized users, and for determining whether its use of the platform complies with laws that apply to its practice.
Diagnosticy does not replace medical judgment, does not provide emergency services, and does not by itself make an operation compliant with any specific regulatory framework.
5. When we share information
- With vendors that help us operate infrastructure, support, hosting, communications, or payments under appropriate confidentiality obligations.
- With the people or teams that your organization authorizes inside its own account.
- When required by law, valid legal process, or a request from a competent authority.
- When reasonably necessary to investigate incidents, protect rights, prevent fraud, or enforce our terms.
- As part of a merger, financing, reorganization, or sale of the business, subject to applicable safeguards.
6. Security and retention
We apply reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, alteration, or improper disclosure.
We keep information for as long as needed to operate the service, comply with legal obligations, resolve disputes, and enforce active agreements.
7. Your choices, updates, and contact
- You may request access, correction, export, or deletion of certain information, subject to applicable law and the operational needs of the service.
- You may update account details or opt out of non-essential communications by following the message instructions or contacting us directly.
- We may update this policy to reflect product, operational, or legal changes. The current version will remain published on this page with its effective date.
- If you have privacy questions or want to make a request, contact us at support@diagnosticy.com