Privacy Policy
Last updated: June 26, 2026
This page is maintained by the ProtocolMD team to describe how ProtocolMD operates. It is informational and not legal advice.
1. Who we are
ProtocolMD ("we", "us") provides clinical decision support to licensed physicians. Contact: drfahadgul1@gmail.com.
2. Information we collect
- Account data: name, email, professional role, country.
- Usage data: features used, queries made, timestamps, device and browser metadata.
- Clinical inputs: case descriptions, attached images or files you choose to submit.
- Billing data: handled by our payment processors (Paddle, LemonSqueezy, SafePay). We do not store full card numbers.
3. How we use information
- To deliver and improve the Service.
- To authenticate users, prevent abuse, and enforce usage limits.
- To process subscriptions and comply with tax and legal obligations.
- To send service-related communications.
4. AI processing
Clinical inputs you submit are sent to third-party AI model providers (currently Google Gemini) solely to generate the requested output. We do not use your inputs to train AI models. Do not submit identifiable patient data unless you have lawful basis to do so; we recommend de-identification.
5. Subprocessors
- Supabase (database, authentication, file storage)
- Cloudflare (hosting, CDN, security)
- Google Gemini (AI inference)
- Paddle, LemonSqueezy, SafePay (payments)
6. Retention
Account and usage data are retained while your account is active and for a reasonable period afterwards to comply with legal and accounting obligations. You may request deletion at any time.
7. Your rights
You may access, correct, export, or delete your personal data by contacting drfahadgul1@gmail.com. Users in the EU/UK have rights under GDPR; users in California have rights under the CCPA.
8. Security
We use industry-standard safeguards including TLS in transit, encryption at rest on managed databases, role-based access control, and row-level security. No system is perfectly secure; report concerns to drfahadgul1@gmail.com.
9. International transfers
Data may be processed in countries other than yours, including the United States and the European Union, with appropriate safeguards.
10. Children
The Service is not directed to children under 18 and we do not knowingly collect their personal data.
11. Changes
We may update this policy and will post the new "Last updated" date above. Material changes will be notified by email or in-app.