Privacy Policy

When you create an account we collect your email and basic profile information you provide (name, phone, city/state). When you book a visit we collect appointment details, payment information processed by Stripe (we never store full card numbers), and any treatment history you choose to share with your clinician.

Clinicians using the clinic portal supply business information (clinic name, address, services, photos) and connect their Stripe account for payouts.

• To match you with clinicians and run the booking, payment, and visit-flow features.
• To send transactional notifications (booking confirmations, reminders, chat). You control these in /dashboard/settings.
• To maintain a HIPAA-compliant audit log of who accessed which records.
• To improve search relevance, fight fraud, and meet our legal obligations.

We do not sell your data, and we do not use treatment information for advertising.

Access to your records is scoped to (a) you, (b) the clinic staff at clinics you have an active relationship with, and (c) MedSpot staff acting under audited admin tooling. Treatment notes, prescriptions, and uploaded insurance cards are private to you and the clinic you shared them with.

We rely on a small set of vetted vendors to operate the service: Supabase (Postgres + Storage + Auth), Stripe (payments + payouts), Twilio (SMS), Resend (transactional email), Daily.co (telehealth video), Expo (mobile push), Mapbox (geocoding), Sentry (error telemetry), and PostHog (product analytics — you can opt out via your browser's Do-Not-Track signal).

You can export everything we hold about you at /account/export(JSON download) and delete your account at /account/delete. Deletion runs through a 30-day grace window during which you can cancel. After 30 days we anonymise your records — clinical history is retained where required by law (typically 7 years for healthcare records) but is no longer linked to your identity.

All data in transit is TLS 1.2+. Data at rest is encrypted at the Supabase storage layer. We rotate credentials, keep dependency alerts on, and run audits before each release. If you spot a security issue, please email [email protected].

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to opt out of certain processing. The mechanisms above (export + delete) are available to everyone. For other requests, email [email protected].

When we change this policy in a material way we will email account holders before the change takes effect.