Privacy Policy

1. Introduction

MedOptimyze ("we," "our," or "us") is committed to protecting the privacy and security of your personal information and protected health information (PHI). This Privacy Policy describes how we collect, use, disclose, and safeguard information when you use our medication analysis and clinical decision support application.

2. Information We Collect

We may collect the following types of information:

• Patient Data: Names, dates of birth, medical record numbers, diagnoses, medications, allergies, and lab results synchronized from PointClickCare
• User Information: Login credentials and session data for authentication
• Usage Data: Information about how you interact with our application

3. How We Use Your Information

We use the information we collect to:

• Provide medication analysis and clinical decision support services
• Generate recommendations based on current medical guidelines
• Synchronize data with PointClickCare EHR systems
• Create reports for healthcare providers
• Improve our services and user experience

4. Data Security

We implement appropriate technical and organizational security measures to protect your information, including:

• Encrypted data transmission using HTTPS/TLS
• Secure OAuth 2.0 authentication with PointClickCare
• Token revocation on user logout for session security
• Database encryption at rest
• Access controls and audit logging

5. PointClickCare Integration

When you connect to PointClickCare, we use OAuth 2.0 (3-legged) authentication to access patient data on your behalf. This means:

• You explicitly authorize data access through your PointClickCare login
• Access tokens are securely stored and refreshed automatically
• When you disconnect or log out, access tokens are revoked immediately
• We only access the minimum data necessary for our services

6. Data Sharing

We do not sell, rent, or share your personal information or PHI with third parties except:

• As required by law or legal process
• To comply with HIPAA and other healthcare regulations
• With your explicit consent

7. HIPAA Compliance

As a healthcare application handling protected health information (PHI), we adhere to the Health Insurance Portability and Accountability Act (HIPAA) requirements, including appropriate administrative, physical, and technical safeguards.

8. Your Rights

You have the right to:

• Access your personal information
• Request correction of inaccurate data
• Disconnect from PointClickCare at any time
• Request deletion of your data

9. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Email: support@medoptimyze.com

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.