This Privacy Policy explains how Glyphix handles information for its business-to-business healthcare software and services.

1. Data Controller & Organization Information

Glyphix is the data controller for account, billing, and service administration data processed through glyphmed.app. For privacy questions, requests, or notices, contact admin@glyphmed.app. Where a clinic submits patient information, Glyphix acts as a service provider or processor on the clinic's instructions.

2. Types of Data Processed

We process administrative clinic records, professional contact data, account and billing details, and de-identified clinical notes used to provide documentation and workflow features. Customer organizations remain responsible for determining what patient information is entered and for maintaining the appropriate notices and permissions.

3. AI Processing & Security Standards

Glyphix uses natural-language processing to support clinical documentation and workflow automation. AI processing is performed with data isolation controls, and protected patient information (PHI) is not used to train public or generally available models. Data is encrypted with TLS 1.3 in transit and AES-256 at rest. Access is limited by least-privilege permissions, authentication controls, and audit practices appropriate for a professional healthcare SaaS.

4. Patient Data Confidentiality

Glyphix is designed to support medical confidentiality obligations and applicable healthcare privacy requirements. We maintain safeguards for the confidentiality, integrity, and availability of clinical information. Clinics must configure access appropriately and use Glyphix in accordance with applicable law, professional duties, and their patient relationships.

5. User Rights & Retention Policies

Authorized customers may request access to, export of, correction of, or deletion of their account and clinic records by contacting admin@glyphmed.app. We retain records only for as long as needed to provide the service, meet contractual or legal obligations, resolve disputes, and enforce agreements. After account termination and any required retention period, data is securely deleted or irreversibly anonymized. We will confirm the scope and timing of a request with the organization's authorized administrator.

6. Contact

Questions about this policy or a data request can be sent to admin@glyphmed.app.