← Back

Privacy Policy

Medical Records AI — ConversationMine, Inc. — Effective May 6, 2026

1. Data We Collect

We collect account information (name, email), uploaded medical records, and usage data necessary to operate the service. Medical records are treated as PHI under HIPAA.

2. How We Use Your Data

Data is used solely to provide and improve the Medical Records AI service. We do not sell, share, or use PHI for advertising purposes.

3. HIPAA Compliance

ConversationMine, Inc. operates as a HIPAA Business Associate. All data is encrypted at rest (AES-256) and in transit (TLS 1.2+). Access controls are enforced per user account.

4. Data Retention

Uploaded records are retained for the duration of your subscription and deleted within 30 days of account cancellation upon request.

5. Third-Party Services

We use Stripe for payment processing and Anthropic APIs for AI analysis. Each provider has their own privacy policy. We do not share PHI with third-party AI providers.

6. Contact

Privacy requests: support@conversationmine.ai