What data we collect
We collect different categories of data depending on how someone interacts with Diagnnova:
- Website visitors: basic website usage data, cookie choices, and form interaction data.
- Demo requests: name, work email, clinic or practice details, role, and information you choose to share in the request.
- Product users: account details, usage logs, documentation workflow inputs, and approved outputs needed to run the service.
How patient data is processed
Diagnnova is a documentation assistant for clinical workflows. It helps draft medical notes and related documents from consented visit information.
Doctors review and approve content before it is saved to clinical records. Diagnnova is not a diagnostic tool and does not replace clinical judgment.
Patient consent
Audio and patient data are processed only with patient consent. Consent must be informed, clear, and recorded according to clinic policy.
If a patient declines or withdraws consent, processing for that interaction is stopped, and the workflow continues without consent-based processing.
Legal basis under GDPR
Depending on the context, processing may rely on consent, contract performance, legal obligations, or legitimate interests, with extra safeguards for health-related data.
Exact controller/processor allocations and legal basis mapping should be adapted to each clinic's setup.
to be reviewed by a lawyer
Data storage and encryption
Data is stored using controlled-access infrastructure with security monitoring and role-based permissions.
Encryption is used in transit and at rest for protected data. Access is limited to authorized personnel with operational need.
Retention and deletion
Data is retained only as long as needed for service delivery, legal obligations, and security controls, then securely deleted or anonymized.
Retention periods may differ by data category and local legal requirements.
to be reviewed by a lawyer
Sharing with third parties
Diagnnova shares data only when needed to operate the service, meet legal obligations, or support clinic-requested integrations.
- Service providers are contractually bound to confidentiality and data protection duties.
- Data is not sold.
- Patient data is not used for advertising.
to be reviewed by a lawyer
Your rights: access, correction, deletion
Depending on your role and applicable law, you may have rights to request access, correction, deletion, restriction, portability, or objection.
Requests are reviewed and handled within legal timelines. Clinics remain responsible for handling rights related to their own patient records where they act as controller.
Contact for privacy questions
If you have privacy questions or want to submit a request, contact us at [email protected].
Include your name, clinic (if relevant), and the request type so we can respond faster.