Privacy Policy

Information you give us:

• Demo requests and messages: your name, email address, organization, role and anything you write to us.
• Referral portal profile: whether you are a physician or office staff, your name, contact details, specialty and National Provider Identifier (NPI), and your clinic’s name, address, phone and fax numbers.
• Referrals: the patient information, clinical details, diagnosis codes and documents you submit with a referral.

Information from Google when you sign in:

• If you choose to sign in with Google, Google shares your name, email address, profile picture and a Google account identifier with us. We request only these basic profile permissions; we do not access your Gmail, Google Drive, contacts, calendar or any other Google data.

Information collected automatically:

• Technical information such as IP address, browser type, the pages you request and the time of each request, which our hosting providers record in server logs.
• A session cookie that keeps you signed in. We do not use advertising cookies or third-party analytics or tracking tools.

• To provide the fortecare app: signing you in, setting up your account and clinic, and delivering referrals to the receiving clinic.
• To verify new referral portal accounts before they can send referrals.
• To respond to demo requests and other messages.
• To keep the service secure, including preventing misuse, investigating problems and keeping audit records.
• To maintain and improve the service.
• To meet legal obligations.

We do not sell personal information, and we do not use it for advertising.

Referrals contain protected health information (PHI). We process PHI on behalf of the healthcare organizations that use fortecare, and only to provide the service to them. Our use and disclosure of PHI is governed by our agreements with those organizations and by applicable law, including the Health Insurance Portability and Accountability Act (HIPAA).

The service uses automated tools, including artificial intelligence, to help organize and review referral documents. Their output supports, and does not replace, the judgment of the clinicians who review each referral.

Patients who have questions about their health information, or who want to exercise their rights over it, should contact their healthcare provider. We will support providers in responding to those requests.

We use the information we receive from Google only to sign you in and to identify your account, including matching you with colleagues who list the same email address for your clinic. We do not use it for advertising, we do not sell it, and we do not transfer it to others except as needed to provide the service, to comply with law, or as part of a merger or acquisition.

fortecare’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• With the receiving clinic: a referral, and the referring physician and clinic details on it, is shared with the clinic it is sent to.
• With members of your clinic: people who belong to the same referring clinic can see that clinic’s referrals and its members.
• With service providers that host and run fortecare for us, such as cloud hosting and storage, email delivery and artificial intelligence providers. They may use the information only to provide services to us and are bound by confidentiality and security obligations, including business associate agreements where required.
• When required by law, or to protect the rights, safety and security of our users, patients, fortecare or others.
• As part of a merger, acquisition or sale of assets, subject to this Privacy Policy.

We protect information with administrative, technical and physical safeguards, including encryption in transit and at rest, access controls based on each user’s role, and audit logging. No system is perfectly secure, so we cannot guarantee absolute security.

We keep account information for as long as your account is active and as needed to provide the service. We keep referral and patient information for as long as required by our agreements with healthcare organizations and by applicable medical records and legal retention requirements. When information is no longer needed, we delete or de-identify it.

You can review and update your referral portal profile and clinic details in the app. You can ask us to access, correct or delete your personal information, subject to legal and contractual obligations to keep certain records. You can also remove fortecare’s access to your Google account at any time from your Google Account settings, under Security › Third-party apps & services.

Depending on where you live, you may have additional rights under local law. To make a request, contact us using the details below.

fortecare accounts are for healthcare professionals and their staff. We do not knowingly collect personal information from children through the website or app, other than patient information submitted by healthcare providers as part of a referral.

We may update this Privacy Policy from time to time. We will post the updated version on this page with a new effective date, and let account holders know of material changes.

Questions about this Privacy Policy or our privacy practices: contact@fortecare.ai