Privacy Policy
iCompare by MedSuite Digital LLC
Effective Date: May 15, 2025
MedSuite Digital LLC ("we", "our", or "us") operates the iCompare platform (the "Service") for licensed healthcare providers. This Privacy Policy explains how we collect, use, and share information when you use our platform.
1. Information We Collect
We collect the following information:
- Personal & Clinic Info: Full name, email, clinic name, phone number, address, website, and information about doctors at the clinic (names and FTE percentages).
- Client Information: Client names, phone numbers, email addresses, date of birth, and notes provided by clinic staff. All client PII is encrypted using AES-256-GCM encryption before storage.
- Mobile Information: Phone numbers provided by clinic staff or patients for SMS messaging, such as contact lens pricing updates.
- Usage Data: Standard technical data your browser sends (e.g., IP address, browser type).
- Billing Info: Collected and processed by Stripe on our behalf.
2. How We Use Your Information
We use your data to:
- Provide and manage access to the iCompare platform.
- Send SMS messages with contact lens pricing summaries to clinic staff and patients who have explicitly opted in. Message frequency: 1-3 messages per interaction.
- Facilitate billing and account services.
- Communicate with you about updates, billing, or customer support.
- Analyze aggregated usage patterns to improve the Service.
3. How We Share Your Information
- We do not share your mobile information with third parties for marketing or promotional purposes. Mobile data may be shared with trusted subcontractors (e.g., customer support providers) solely to facilitate SMS messaging or support services.
- We share other data only as needed with:
- Clerk: For authentication and user management.
- Stripe: For billing and payment processing.
We do not sell or rent your information to third parties.
4. SMS Messaging
- Consent: We send SMS messages only to users who have explicitly opted in through a clinic-managed process (e.g., in-clinic paper form or staff-assisted opt-in). You may opt out at any time by replying "STOP" to any message.
- Message Frequency: Typically 1-3 messages per interaction, based on user-initiated requests for pricing information.
- Data Rates: Message and data rates may apply, depending on your mobile plan.
- Support: Reply "HELP" to any message or contact support@medsuitedigital.com for assistance.
5. International Data Transfers
We are based in the United States and may transfer your data to countries outside your residence, including Canada and the U.S., where privacy laws may differ.
6. Data Security
We implement industry-standard security measures to protect your information:
- Encryption: All client personal information (PII) is encrypted using AES-256-GCM encryption before storage in our database.
- Audit Trails: All changes to client records are logged with timestamps, user information, and IP addresses for security and compliance.
- Access Controls: Client data is only accessible to authorized clinic staff within your organization.
- Secure Transmission: All data is transmitted over encrypted HTTPS connections.
However, no internet transmission is 100% secure.
7. Your Rights
Depending on your location, you may have the right to access, update, or delete your information. Contact us at support@medsuitedigital.com to make such requests.
8. Updates to This Policy
We may revise this Privacy Policy from time to time. Updates will be posted on this page with a new effective date.
9. Contact Us
If you have questions about this Privacy Policy, contact us at:
- Email: support@medsuitedigital.com
- Business Name: MedSuite Digital LLC