Terms & Conditions

a. Compliance Commitment

DoctorNote Health LLC complies with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and all related federal and state privacy laws. We are committed to protecting the confidentiality, integrity, and security of all Protected Health Information ('PHI') that you provide through our platform.

b. Data Collection and Use

PHI includes information such as your name, medical condition, diagnosis, doctor's notes, prescriptions, or any identifiers linked to your health. We collect PHI only for legitimate healthcare or administrative purposes, including virtual consultations, issuing documentation, and maintaining medical records. Your PHI will not be disclosed to third parties without your explicit authorization, except as required by law or as necessary for treatment, payment, or healthcare operations.

c. Security Practices

• All PHI is encrypted in transit (HTTPS/TLS) and at rest.
• Access is limited to authorized healthcare professionals and staff under signed confidentiality and HIPAA compliance agreements.
• We use secure cloud infrastructure and implement administrative, physical, and technical safeguards to prevent unauthorized access.

d. Business Associate Agreements (BAA)

We ensure that all partners or vendors handling PHI (such as cloud storage providers or telehealth partners) maintain signed Business Associate Agreements (BAAs) to ensure continued HIPAA compliance.

e. Patient Rights

You have the right to:

• Request copies or corrections of your health information.
• Restrict disclosures or revoke consent for sharing your PHI.
• Receive an accounting of disclosures made by us.

To exercise these rights, contact us at support@doctornote.health.

f. Breach Notification

If a data breach involving your PHI occurs, we will notify you promptly in accordance with HIPAA's Breach Notification Rule.