Legal

Privacy notice

1. Who we are

HealthDefence is built by ASHTANGACENTERODESSA.

[Counsel: the legal entity responsible for personal data, its address, and a privacy contact.]

2. This website

This website sets no cookies and uses no analytics, advertising or other third-party scripts. It is hosted on Cloudflare, which processes standard request data, such as IP addresses, to deliver and protect the site. If you email us, we receive what you send.

[Counsel: legal bases, Cloudflare's role, how long emails are kept.]

3. Clinician accounts

To open the clinical tools we process a clinician's account details, licence information (checked, in the US, against the public CMS NPPES registry) and, once identity proofing is switched on, the result of an identity check performed by Stripe Identity.

[Counsel: categories, purposes, legal bases, retention.]

4. Patient information in consultations

Patient information that clinicians enter is processed on behalf of the clinician or practice, as their business associate under HIPAA. HealthDefence does not yet accept real patient information.

[Counsel: relationship to the customer's business associate agreement; EU pilot roles under the GDPR.]

5. Service providers

Google Cloud (hosting, United States), Anthropic (AI models), Stripe (payments and identity verification), Resend (account email) and Cloudflare (DNS and this website).

[Counsel: the final list, each provider's role, and the transfer mechanisms that apply.]

6. Retention

[Counsel: retention periods for each category of data.]

7. Your rights

[Counsel: rights under applicable US state law and, for the EU pilot, the GDPR, and how to exercise them.]

8. Changes to this notice

[Counsel: how changes are announced and the effective date.]