Clinical Data Processing Consent
Legal Notices, Privacy & Clinical Data Consent — Medroxa
Last updated: July 2026
This page summarizes the policies you accept when you sign in, create an account, continue with Google, or run a clinical analysis in Medroxa. It is provided for transparency and informed consent before health-related data is processed.
1. Purpose and authorized users
Medroxa is a clinical decision-support platform for authorized pharmacy and healthcare staff. It is not a substitute for professional medical advice, diagnosis, or treatment.
Access is limited to users with accounts issued or approved by an administrator. You must not enter patient data unless you are legally authorized to do so.
2. What you consent to
By using Medroxa (sign-in, account creation, Google Sign-In, or submitting an analysis), you acknowledge and accept:
| Topic | Summary |
|---|---|
| Privacy Policy | How we collect, use, retain, and protect account, session, and billing metadata |
| Terms of Service | Permitted use, subscription terms, liability limits, and prohibited uses |
| Legal Notices & Disclaimer | Educational-use limits, no warranty, limitation of liability, AI output labeling |
| Health data processing | De-identified health-related data you enter may be processed for clinical decision support only during your session |
| Third-party AI processing | Clinical text, uploaded images (OCR/imaging), and audio transcripts may be sent to configured processors (see Section 5) |
| Audio processing | Recorded or uploaded audio may be transcribed on the configured server; transcripts may be processed by the AI analysis service |
| External reference search | When enabled by your administrator, query context may be sent to external reference services |
3. Medical and educational disclaimer
All information produced by Medroxa is for educational and clinical decision-support purposes only. It is not intended to replace clinical judgment or guide individual patient care.
-
Outputs are draft and preliminary; they may contain errors or omissions.
-
Human review by a licensed pharmacist, prescriber, or other authorized clinician is mandatory before any clinical action.
-
You assume sole responsibility for decisions made based on this system.
-
Medroxa disclaims warranties and limits liability as described in the Legal Notices and Disclaimer.
4. Health data and de-identification
Health-related information is special-category data under many privacy laws (e.g. GDPR Art. 9, Iran e-commerce privacy rules).
You agree to:
-
Enter de-identified clinical context only (no patient names, national IDs, phone numbers, or other direct identifiers unless required and authorized).
-
Upload de-identified clinical images only, or confirm you have authorization to process them.
-
Upload or record de-identified audio only, or confirm you are authorized to process it for transcription.
-
Use outputs only as decision support, not as definitive diagnosis, prescribing, or treatment instructions.
Clinical content entered in tool forms is processed in server memory for the duration of the request and is not stored in a clinical database unless explicitly announced in a future update. Audit logs record access events without clinical text.
5. Third-party processors
Depending on server configuration, data may be processed by:
| Processor | Purpose | Data sent |
|---|---|---|
| Microsoft Azure OpenAI | AI analysis | Clinical prompts, uploaded images for OCR/imaging tools |
| Azure OpenAI Whisper / OpenAI API | Speech-to-text (when STT enabled) | Audio files for transcription only |
| Google Sign-In | Authentication | Name, email, Google account identifier |
| CMS NPPES | NPI registry lookup (prescription generation) | NPI submitted for validation |
| Stripe | Subscription billing | Payment method and billing email (PCI handled by Stripe) |
Active processors are disclosed on this page and in the Privacy Policy. Your organization should maintain appropriate agreements (DPA/BAA where required) with processors.
6. AI transparency
-
You are interacting with software that uses artificial intelligence, not a human healthcare professional.
-
Model outputs are generated by language/vision models and require independent verification.
-
Controlled or scheduled substances cannot be processed in prescription generation tools.
7. Your rights and withdrawing consent
Depending on your jurisdiction, you may have rights to access, correct, or delete personal data.
To withdraw consent or limit processing:
-
Sign out and clear browser storage (theme, layout, consent flags in
localStorage). -
Request account or audit-log deletion through your system administrator or compliance officer.
-
Stop submitting clinical data — no further health-data processing occurs after you cease use.
Withdrawal does not affect the lawfulness of processing based on consent before withdrawal, where applicable.
8. How acceptance is recorded
-
Account access: Acceptance is recorded when you sign in, register, or continue with Google (
medroxa-consent-v3in browser storage). -
Clinical analysis: Each analysis submission confirms you have read and accept this page and linked policies.
9. Full policy documents
The complete text of each policy is included below on this page and available as standalone documents:
10. Contact
For privacy, compliance, or account questions, contact:
Mohammadamin Asadirad
Cell: (209) 684-2978
Cell: (925) 529-2345
Email: support@medroxa.com
This document is a technical compliance template. Consult qualified legal counsel for binding compliance in your jurisdiction.