Privacy Policy
Last Updated: 18th May, 2025
At DycoVue, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-assisted radiology PACS platform.
1. Information We Collect
1.1 Personal Information
We may collect personal information that you provide directly to us, including:
- Contact information (name, email address, phone number, organization)
- Account credentials (username, password)
- Professional information (medical credentials, specialty, role)
- Payment information (processed through secure third-party payment processors)
1.2 Patient Information
As a healthcare provider using our platform, you may upload patient information, including:
- Medical images (X-rays, CT scans, MRIs, ultrasounds, etc.)
- Patient identifiers (as required for proper medical record keeping)
- Clinical information related to the images
You are responsible for obtaining appropriate patient consent before uploading their information to our platform, in accordance with applicable healthcare privacy laws.
1.3 Usage Data
We automatically collect certain information when you access or use our platform, including:
- Device information (IP address, browser type, operating system)
- Usage patterns (pages visited, features used, time spent on platform)
- Performance data (load times, errors encountered)
2. How We Use Your Information
- Providing and improving our services: To operate the platform, deliver the features you request, and enhance functionality based on usage patterns
- AI algorithm training and improvement: To train and improve our AI algorithms for better image analysis (using de-identified data unless you explicitly consent otherwise)
- Communication: To respond to your inquiries, provide support, and send service updates
- Security and compliance: To protect our platform, detect fraud, and ensure compliance with legal obligations
- Analytics: To understand how our platform is used and make data-driven improvements
3. How We Protect Your Information
We implement a variety of security measures to maintain the safety of your information, including:
- Encryption: All data transmitted to and from our platform is encrypted using industry-standard protocols
- Access controls: Strict access controls limit who can view your information within our organization
- Regular security audits: We conduct regular security assessments and penetration testing
- HIPAA compliance: Our systems are designed to comply with HIPAA and other healthcare privacy regulations
- Data backups: Regular backups ensure data can be recovered in case of system failures
While we implement safeguards, no system is 100% secure. We encourage you to take steps to protect your account, such as using strong passwords and not sharing your credentials.
4. Information Sharing and Disclosure
We may share your information in the following circumstances:
- With your consent: When you explicitly authorize us to share your information
- Service providers: With third-party vendors who help us operate our platform (all bound by confidentiality obligations)
- Legal requirements: When required by law, regulation, or legal process
- Business transfers: In connection with a merger, acquisition, or sale of assets (with appropriate safeguards for your data)
We do not sell your personal information or patient data to third parties.
5. Your Rights and Choices
Depending on your location, you may have certain rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you
- Correction: Request that we correct inaccurate information
- Deletion: Request that we delete your personal information (subject to legal retention requirements)
- Restriction: Request that we limit how we use your information
- Data portability: Request a copy of your information in a structured, commonly used format
- Objection: Object to our processing of your information in certain circumstances
To exercise these rights, please contact us using the information provided at the end of this policy.
6. Data Retention
We retain your information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. The specific retention period depends on the type of information and applicable regulations.
For medical images and patient data, we follow healthcare record retention requirements, which typically range from 5 to 10 years depending on the jurisdiction.
7. International Data Transfers
DycoVue operates globally, which means your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.
When we transfer personal information across borders, we implement appropriate safeguards to ensure your information receives an adequate level of protection, regardless of where it is processed.
8. Children’s Privacy
Our platform is not intended for use by individuals under the age of 18, except as patients whose information is managed by healthcare providers. We do not knowingly collect personal information from children under 18 without appropriate parental or guardian consent.
9. Governing Law
These Terms shall be governed by and construed in accordance with the laws of the State of California, without regard to its conflict of law provisions.
Contact Information
If you have any questions about these Terms, please contact us at:
DycoVue, Inc.
123 Innovation Way
San Francisco, CA 94107
Email: legal@dycovue.com
Phone: +1 (555) 123-4567