Privacy Policy

1. Information We Collect

• Account information: name, email address, password (hashed), specialty, and institution.
• Professional credentials: medical license documents, ORCID identifiers, and publication records submitted for verification.
• Profile data: biography, photo, skills, languages, years of experience, and location.
• Usage data: pages visited, features used, posts created, and interactions with other users.
• Device data: IP address, browser type, operating system, and device identifiers.
• Communications: messages sent through the platform (stored encrypted at rest).

2. How We Use Your Information

• Provide, maintain, and improve the Medocrate platform and its features.
• Verify your professional credentials and maintain a trusted network of healthcare professionals.
• Personalize your feed and recommendations based on your specialty and activity.
• Send transactional emails (email verification, password reset, notifications you opt into).
• Generate AI-powered research digests relevant to your medical specialty.
• Detect and prevent fraud, abuse, and security incidents.
• Comply with legal obligations applicable to healthcare professional networks.

3. Data Sharing

We do not sell your personal data. We share information only with: (a) service providers who process data on our behalf under strict data processing agreements (AWS, Cloudflare, email providers); (b) other users only to the extent your profile is visible based on your privacy settings; (c) law enforcement when required by valid legal process. We never share medical credentials or verification documents with third parties beyond what is necessary for verification.

4. Data Retention

We retain your account data for as long as your account is active. When you delete your account, your login is disabled immediately and all active sessions are terminated; your profile, posts, messages, and connections are retained in our systems rather than immediately erased — see "Account Deletion" below for details. Aggregated, anonymised analytics data may be retained indefinitely.

5. Account Deletion

• To delete your account: open Medocrate, go to Profile → Edit Profile, scroll to the "Delete Account" section, select "Delete My Account", and confirm.
• Deletion takes effect immediately — you are signed out on all devices and can no longer log in with that account.
• What is removed: your ability to log in and access the account.
• What is currently retained: your profile, posts, comments, messages, and connections remain stored in our systems and are not automatically erased.
• To request permanent erasure of retained data, contact themedocrate@gmail.com — we process these requests manually.
• You may create a new account with the same email address after deletion.

6. Security

We use industry-standard security measures: TLS encryption in transit, AES-256 encryption at rest for sensitive documents, bcrypt password hashing, httpOnly cookies for session tokens, rate limiting, and regular security audits. However, no system is completely secure — we encourage you to use a strong, unique password.

7. Your Rights

• Access: request a copy of all personal data we hold about you.
• Correction: update inaccurate or incomplete data via your profile settings.
• Deletion: request deletion of your account (see "Account Deletion" above) and, separately, permanent erasure of retained data.
• Portability: export your data in a machine-readable format.
• Objection: opt out of non-essential processing such as marketing communications.
• To exercise any right, contact themedocrate@gmail.com. We respond within 30 days.

8. Cookies

We use essential cookies for authentication (httpOnly session cookies) and a locale preference cookie. See our Cookie Policy for full details.

9. Children

Medocrate is intended for licensed healthcare professionals aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has provided data to us, contact themedocrate@gmail.com immediately.

10. Changes to This Policy

We may update this policy to reflect changes in our practices or applicable law. Material changes will be notified via email and an in-app notice at least 14 days before taking effect. Continued use after the effective date constitutes acceptance.

11. Contact

Medocrate, Inc. · Data Controller · themedocrate@gmail.com