Privacy Policy
Last Updated: March 17, 2026
1. Introduction & Scope
At Alphatic Labs ("Alphatic," "we," "us," or "our"), we specialize in providing next-generation healthcare infrastructure through the Alphatic Practice Cloud. We recognize that clinicians and healthcare facilities handle the most sensitive data-patient health information. This Privacy Policy outlines our commitment to data integrity, transparency, and the rigorous security standards we maintain to protect your practice and your patients.
2. Alphatic as a Data Processor
In the context of the Alphatic Practice Cloud, **your healthcare facility is the Data Controller**, and **Alphatic Labs is the Data Processor**.
- You own all patient data entered into the system.
- We process this data only to provide the services you've subscribed to.
- We do not "mine" patient data for advertising or sell it to third parties.
3. Information We Collect
A. Practice Information
Clinic name, registration details, tax identifiers, and official contact information used for billing and identity verification.
B. Staff & Provider Data
Names, professional credentials, digital signatures, and login audit trails to ensure clinical accountability.
C. Patient Records
Demographics, medical histories, prescriptions, lab results, and imaging data as required for clinical documentation.
4. AI & Clinical Intelligence Transparency
Our intelligence features, including automated scribing and SOAP note generation, utilize advanced Large Language Models (LLMs).
**Zero Retention for Intelligence Training:** We do not use your practice's patient data to train or fine-tune our global AI models. Every processing instance is isolated.
**Transient Processing:** Audio data processed during scribing is handled in a transient state. Once the clinical note is generated and confirmed by the physician, the raw audio is purged as per your configured retention settings.
5. Security Infrastructure
We employ a "Defense in Depth" strategy to ensure data resilience:
- EncryptionAES-256 for data at rest and TLS 1.3 for data in transit.
- IsolationRow-Level Security (RLS) ensures that one clinic never has access to another's vault.
- AuditingEvery access to a patient record is logged with an immutable timestamp.
- BackupsReal-time database replication and point-in-time recovery capabilities.
6. Data Retention & Portability
We retain data for as long as your subscription is active. Upon termination, we provide a 30-day grace period for you to export your data in structured formats (JSON/PDF). Following this period, all practice data is deleted from our production systems in accordance with our data sanitization protocols.
Data Privacy Rights
Depending on your jurisdiction, you and your patients may have rights regarding access, rectification, and erasure of personal data. As the Data Processor, Alphatic Labs will assist your practice in fulfilling these requests.