LEGAL

Privacy Policy

The honest version: we are designed to know as little as possible. Here is exactly what we process and why.

Patient information (PHI)

• Patient name + date of birth — encrypted (AES-256-GCM) in a short-lived vault, used only to match the patient at the fulfilling facility, purged after a successful transfer or within 72 hours.
• Local MRN — optional, requesting facility's own reference; same vault, same purge.
• Images and documents — never stored; streamed from source PACS to destination.
• Disclosure log — written to the facility's own EHR, under the patient. We keep only a transaction ID and routing metadata.

PHI never appears in our database, logs, analytics, or emails. Our handling of PHI is governed by a signed Business Associate Agreement with each facility.

Account information

For facility staff we store name, work email, role, and hashed passwords — used to run your tenant, secure access, and send operational notifications (new requests, fulfillment, SLA alerts). We do not sell or share this information, and we do not use third-party advertising or tracking on the app.

Website visitors

The marketing site collects nothing beyond standard server logs. The demo booking form sends us exactly what you type, so we can schedule the call.

Security

TLS 1.2+ everywhere, encrypted vault with automatic expiry, role-based access, per-organization API keys, and an immutable audit trail per transaction. Details in our security overview — available on request.

Contact

Privacy questions or requests: sales@healthxfer.com. Patients: record-access requests go to your healthcare facility, which controls your records — we are their processor and hold no patient data to produce.