Privacy Policy

1. Introduction

FaceMed, Inc. (“FaceMed,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (facemed.ai), use our platform, or interact with our services.

2. Information We Collect

2.1 Information You Provide

• Contact information: Name, email address, phone number, organization, and role when you request a demo or contact us.
• Account information: Credentials and profile details when you create a physician or administrator account.
• Patient intake data: Information provided by patients during AI-guided intake sessions, including voice recordings, video recordings, chat transcripts, and clinical responses. This data is collected on behalf of the healthcare provider and is treated as Protected Health Information (PHI) under HIPAA.

2.2 Information Collected Automatically

• Usage data: Pages visited, features used, session duration, and interaction patterns.
• Device information: Browser type, operating system, IP address, and device identifiers.
• Cookies and tracking technologies: See our Cookie Preferences page for details.

3. How We Use Your Information

• To provide, operate, and improve our AI-powered intake platform.
• To generate structured clinical notes for healthcare providers.
• To respond to demo requests and customer inquiries.
• To communicate product updates, service information, and relevant content.
• To monitor and analyze usage trends to improve user experience.
• To comply with legal obligations and enforce our terms.

4. Protected Health Information (PHI)

FaceMed processes PHI solely on behalf of healthcare providers under Business Associate Agreements (BAAs). We do not use PHI for marketing, advertising, or any purpose other than providing our clinical intake services. PHI handling complies with all applicable HIPAA regulations.

5. How We Share Your Information

We do not sell your personal information. We may share information in the following circumstances:

• Healthcare providers: Patient intake data is shared with the healthcare provider who initiated the intake session.
• Service providers: Trusted third parties who assist in operating our platform (e.g., cloud hosting, analytics) under strict data protection agreements.
• Legal requirements: When required by law, regulation, or legal process.
• Business transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice.

6. Data Security

We implement industry-standard security measures to protect your information, including:

• End-to-end encryption for data in transit and at rest.
• Access controls and authentication mechanisms.
• Regular security assessments and monitoring.
• Pursuing SOC 2 Type I certification.

7. Data Retention

We retain personal information only as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Patient intake data retention periods are determined by the healthcare provider’s policies and applicable regulations.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your personal information.
• Object to or restrict certain processing activities.
• Data portability.

For patient data inquiries, please contact your healthcare provider directly, as they are the data controller for PHI collected during intake sessions.

9. Children’s Privacy

Our website and marketing services are not directed to individuals under 16. Patient intake sessions for minors are conducted under the authority of the healthcare provider and the minor’s parent or legal guardian.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the effective date. Your continued use of our services after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

FaceMed, Inc.
Email: hi@facemed.ai