Exetazo ScribePrivacy Policy
Effective October 5, 2026.
What we collect
- Account: your name, email, credentials, practice name and type, and billing details (cards are held by Square; we never see card numbers).
- Visits you record: audio, the transcript made from it, and the drafted note, codes and visit times. This is protected health information handled under our Business Associate Agreement with you.
- Usage: how many visits and minutes you record each month and the estimated cost, kept without any patient information, for billing and limits.
How long we keep it
- Audio: deleted as soon as it is transcribed (usually within minutes).
- Transcript: deleted as soon as the draft is written.
- Draft notes: deleted 48 hours after the visit, or immediately when you press Delete.
- Account and usage records: while your account is open; deleted when you delete your account (billing records are kept as tax law requires).
Who processes it
Amazon Web Services (hosting, storage, Amazon Transcribe and Claude on Amazon Bedrock) under Amazon's HIPAA Business Associate Addendum; Square for payments; Resend for account emails (never patient information). We do not sell data, show ads, or use patient information to train AI models.
Security
Encryption in transit and at rest, passwords stored only as salted hashes, extension keys stored only as hashes, and access limited to what the service needs.
Your choices
Delete any draft at any time; delete your account under Account. Questions: support@exetazohealth.com.