Privacy Policy

This Privacy Policy describes how MediScan AI (MediScan Artificial Intelligence Limited) collects, uses, and protects your personal information. We are committed to safeguarding your privacy and ensuring transparency in how we handle your data. Our platform serves Edmonton hospitals and healthcare institutions with artificial intelligence-powered diagnostic and triage capabilities.

Who We Are

We are the data controller responsible for your personal information. We operate the MediScan platform, which provides AI-powered medical imaging classification and diagnostic triage services. Our primary purpose is to support healthcare professionals in Edmonton hospitals with advanced diagnostic tools while maintaining strict data protection standards.

Information We Collect

We collect information necessary to provide our services:

• Account information: name, email address, hospital affiliation, and professional credentials
• Usage data: how you interact with our platform, including diagnostic queries and feature usage
• Technical data: IP address, browser type, device information, and access logs
• Medical imaging data: uploaded patient images for processing (handled with encryption)
• Cookies and tracking technologies to enhance your browsing experience

Legal Basis for Processing

We process your information based on:

• Your explicit consent when you register or use our services
• Legitimate interests in maintaining platform security and improving our diagnostic algorithms
• Legal obligations to comply with healthcare regulations and data protection laws
• Performance of our contract with your hospital or healthcare institution

How We Use Your Information

We use your data to deliver and improve our services. Specifically, we use information to provide diagnostic classifications, maintain platform security, respond to support inquiries, and enhance our AI models. We analyze usage patterns to optimize performance and develop new features. We never sell your personal information to third parties. Your data helps us create better diagnostic tools while respecting your privacy.

Data Retention

We retain your information for specific periods based on purpose:

• Account information: retained for the duration of your account plus 24 months after closure
• Medical imaging data: retained for 36 months or as required by healthcare regulations
• Support communication records: retained for 24 months after resolution
• Server and access logs: retained for 12 months
• Cookies: retained according to cookie settings (typically 12 months)

After retention periods expire, we securely delete your information unless legal obligations require longer retention.

Your Rights

You have the following rights regarding your personal information:

• Right to access: request a copy of your personal data
• Right to rectification: correct inaccurate information
• Right to erasure: request deletion of your data in certain circumstances
• Right to restrict processing: limit how we use your information
• Right to data portability: receive your data in a portable format
• Right to object: oppose certain types of processing
• Right to lodge a complaint: contact the Privacy Commissioner of Canada if you believe your rights have been violated

To exercise any of these rights, please contact us using the details provided below.

Cookies and Tracking

We use cookies to improve your experience on our platform. Cookies help us remember your preferences, maintain your session, and analyze how you use our services. We use both essential cookies (required for functionality) and analytical cookies (to understand usage patterns). You can manage cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality.

Data Security

We implement industry-standard security measures to protect your information from unauthorized access, alteration, or disclosure. Our security practices include encryption, secure authentication, regular security audits, and staff training. However, no security system is completely impenetrable. We continuously monitor and improve our security infrastructure to maintain the highest standards for healthcare data protection.

Third-Party Services

We may share information with trusted third-party service providers who assist us in operating our platform, such as cloud infrastructure providers and analytics services. These partners are contractually obligated to protect your information and use it only for the purposes we specify. We do not authorize them to use your information for other purposes. All third parties comply with applicable data protection regulations.

Policy Updates

We may update this Privacy Policy to reflect changes in our practices or applicable laws. We will notify you of significant changes by updating the "Last updated" date and, where appropriate, by providing additional notice. Your continued use of our platform following any changes constitutes your acceptance of the updated policy. We encourage you to review this policy regularly to stay informed about how we protect your information.