Trust Center
MedConcil processes sensitive health information. Our privacy and security approach focuses on minimizing data exposure, limiting access, protecting stored information and giving users control over their data.
AI safety
MedConcil uses AI as decision support.
Important medical decisions should receive appropriate human review.
The application uses authentication and organization-based access checks. Certain patient fields and medical profiles have application-level encryption. This does not establish that every document, AI result, log or backup has the same protection. No method of storage or transmission provides absolute security.
Medical and genetic data are not authorized for sale or advertising targeting under this policy. Nor does this policy authorize sending diagnoses, symptoms, laboratory results or medical documents to payment-provider metadata or receipts. These restrictions are not a claim that all technical controls have already been verified.
Requested Council analyses use external AI processing, including OpenRouter and the model providers used for the request. Documents, extracted PDF text, filenames and images submitted for analysis can reach these providers. Follow-up questions and previous results can also be sent. Where voice transcription is used, audio is sent to a transcription provider such as Groq.
Automatic identifier detection is limited. It may miss identifiers, is not applied to every attachment or follow-up, and may be unavailable. Identifying information can therefore reach AI providers. Do not treat this process as complete anonymization or legal de-identification. Provider retention and use of submitted data depend on the applicable service configuration and terms; this policy does not promise zero provider retention.
Privacy PolicyDeleting a patient profile does not currently automatically remove every associated document, Council result or copied context. A document-removal action may also require follow-up if storage deletion fails. For removal of an individual document, case, medical profile or account and related records, submit a privacy request specifying its scope.
Backups, logs and copies held by providers require separate handling; no immediate or fixed-time purge is promised here. Information may be retained only where permitted or required by applicable law, for example specific legal obligations or necessary payment-security and fraud-prevention records. These exceptions do not override applicable deletion rights. Ask us which records and grounds apply to your request.
MedConcil cannot erase a copy you or another recipient already downloaded to a system outside its control. This does not remove any applicable duty to notify processors or other recipients of a deletion request.
If you choose to include genetic or pharmacogenomic information in a case or document, it is treated as sensitive health information and may be included in the analysis you request. The storage, AI-processing and deletion limitations in the Privacy Policy apply. This is not a promise of validated genetic testing or a laboratory service.
HIPAA applicability depends on the parties, activity and legal relationship. This notice does not certify HIPAA compliance or establish a Business Associate Agreement. Direct consumer data and any covered healthcare workflows must be assessed under the laws that actually apply.
Contact
Privacy and legal
legal@medconcil.comCompany
GAITO LLC
