Privacy Policy
Last updated: June 23, 2026
This page is maintained by Medrology AI to explain how we handle data on our cloud radiology platform. It is informational and not a certification or legal advice.
1. Information we collect
We collect account information (name, email, role, organization) provided at sign-up, operational data created while using the platform (imaging orders, reports, billing records), and technical data such as log and device information needed to run and secure the service.
2. Protected health information (PHI)
When hospitals use the platform, patient and imaging data may constitute PHI. Medrology AI acts as a processor on behalf of the healthcare organization (the controller). PHI is handled under appropriate safeguards, access controls and encryption, and is only used to provide the contracted services.
3. How we use information
We use data to operate the radiology workflow, route studies to radiologists, generate AI-assisted decision support, process billing, provide support, maintain security, and meet legal obligations. We do not sell personal data.
4. AI processing
AI-assisted reports are decision-support only and are reviewed by a qualified radiologist before clinical use. Imaging context is sent to our AI provider solely to generate the requested analysis.
5. Data sharing
We share data only with sub-processors required to deliver the service (cloud hosting, AI gateway, storage), each bound by contractual data-protection obligations, and with the customer's own authorized users under role-based access controls.
6. Security
We apply encryption in transit and at rest, role-based access control, multi-tenant isolation, and audit logging. No system is perfectly secure, and customers are responsible for managing their own user access.
7. Data retention & deletion
Data is retained for the duration of the customer agreement and as required by applicable medical-records regulations. Customers may request export or deletion of their data subject to legal retention requirements.
8. Your rights
Depending on your jurisdiction, you may have rights to access, correct, or delete personal data. Requests can be made via our contact page.
9. Contact
Questions about this policy? Reach us through the contact page.