# Legal Notices, Privacy & Clinical Data Consent — Medroxa **Last updated:** July 2026 This page summarizes the policies you accept when you sign in, create an account, continue with Google, or run a clinical analysis in Medroxa. It is provided for transparency and informed consent before health-related data is processed. --- ## 1. Purpose and authorized users Medroxa is a **clinical decision-support** platform for authorized pharmacy and healthcare staff. It is **not** a substitute for professional medical advice, diagnosis, or treatment. Access is limited to users with accounts issued or approved by an administrator. You must not enter patient data unless you are legally authorized to do so. --- ## 2. What you consent to By using Medroxa (sign-in, account creation, Google Sign-In, or submitting an analysis), you acknowledge and accept: | Topic | Summary | |-------|---------| | **Privacy Policy** | How we collect, use, retain, and protect account, session, and billing metadata | | **Terms of Service** | Permitted use, subscription terms, liability limits, and prohibited uses | | **Legal Notices & Disclaimer** | Educational-use limits, no warranty, limitation of liability, AI output labeling | | **Health data processing** | De-identified health-related data you enter may be processed **for clinical decision support only** during your session | | **Third-party AI processing** | Clinical text, uploaded images (OCR/imaging), and audio transcripts may be sent to configured processors (see Section 5) | | **Audio processing** | Recorded or uploaded audio may be transcribed on the configured server; transcripts may be processed by the AI analysis service | | **External reference search** | When enabled by your administrator, query context may be sent to external reference services | --- ## 3. Medical and educational disclaimer All information produced by Medroxa is for **educational and clinical decision-support purposes only**. It is **not intended to replace clinical judgment** or guide individual patient care. - Outputs are **draft** and **preliminary**; they may contain errors or omissions. - **Human review** by a licensed pharmacist, prescriber, or other authorized clinician is **mandatory** before any clinical action. - You assume **sole responsibility** for decisions made based on this system. - Medroxa disclaims warranties and limits liability as described in the [Legal Notices and Disclaimer](/legal/legal-notices-disclaimer.md). --- ## 4. Health data and de-identification Health-related information is **special-category data** under many privacy laws (e.g. GDPR Art. 9, Iran e-commerce privacy rules). **You agree to:** - Enter **de-identified** clinical context only (no patient names, national IDs, phone numbers, or other direct identifiers unless required and authorized). - Upload **de-identified** clinical images only, or confirm you have authorization to process them. - Upload or record **de-identified** audio only, or confirm you are authorized to process it for transcription. - Use outputs only as **decision support**, not as definitive diagnosis, prescribing, or treatment instructions. **Clinical content** entered in tool forms is processed in **server memory for the duration of the request** and is **not stored in a clinical database** unless explicitly announced in a future update. Audit logs record access events **without** clinical text. --- ## 5. Third-party processors Depending on server configuration, data may be processed by: | Processor | Purpose | Data sent | |-----------|---------|-----------| | **Microsoft Azure OpenAI** | AI analysis | Clinical prompts, uploaded images for OCR/imaging tools | | **Azure OpenAI Whisper / OpenAI API** | Speech-to-text (when STT enabled) | Audio files for transcription only | | **Google Sign-In** | Authentication | Name, email, Google account identifier | | **CMS NPPES** | NPI registry lookup (prescription generation) | NPI submitted for validation | | **Stripe** | Subscription billing | Payment method and billing email (PCI handled by Stripe) | Active processors are disclosed on this page and in the [Privacy Policy](/legal/privacy-policy.md). Your organization should maintain appropriate agreements (DPA/BAA where required) with processors. --- ## 6. AI transparency - You are interacting with **software that uses artificial intelligence**, not a human healthcare professional. - Model outputs are generated by language/vision models and **require independent verification**. - Controlled or scheduled substances **cannot** be processed in prescription generation tools. --- ## 7. Your rights and withdrawing consent Depending on your jurisdiction, you may have rights to access, correct, or delete personal data. **To withdraw consent or limit processing:** - Sign out and clear browser storage (theme, layout, consent flags in `localStorage`). - Request account or audit-log deletion through your **system administrator** or compliance officer. - Stop submitting clinical data — no further health-data processing occurs after you cease use. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal, where applicable. --- ## 8. How acceptance is recorded - **Account access:** Acceptance is recorded when you sign in, register, or continue with Google (`medroxa-consent-v3` in browser storage). - **Clinical analysis:** Each analysis submission confirms you have read and accept this page and linked policies. --- ## 9. Full policy documents The complete text of each policy is included below on this page and available as standalone documents: - [Privacy Policy](/legal/privacy-policy.md) - [Terms of Service](/legal/terms-of-service.md) - [Legal Notices and Disclaimer](/legal/legal-notices-disclaimer.md) --- ## 10. Contact For privacy, compliance, or account questions, contact: **Mohammadamin Asadirad** Cell: (209) 684-2978 Cell: (925) 529-2345 Email: [support@medroxa.com](mailto:support@medroxa.com) --- *This document is a technical compliance template. Consult qualified legal counsel for binding compliance in your jurisdiction.*