Privacy Policy

Last updated: March 2026

1. Overview

ChartB.ai ("we", "our", "the Service") is a clinical documentation tool that assists physicians in generating medical notes. We are committed to protecting the privacy and security of all information processed through our platform in compliance with the Health Insurance Portability and Accountability Act (HIPAA).

2. Information We Collect

Account Information: Username and encrypted password for authentication.
Clinical Data: Patient data entered by authorized users for the purpose of generating clinical notes. This data is Protected Health Information (PHI) under HIPAA.
Usage Data: Audit logs recording who accessed what and when, as required by HIPAA.

3. How We Use Information

To generate AI-assisted clinical documentation at the physician's request.
To maintain HIPAA-required audit trails.
To authenticate users and protect account security.

4. Data Security

All data is transmitted over HTTPS (TLS encryption in transit).
Data at rest is protected by Azure's Transparent Data Encryption.
Access is restricted to authenticated users with session-based controls.
Passwords are hashed using industry-standard algorithms.
All access is logged for HIPAA audit compliance.

5. Third-Party Services

Amazon Web Services (AWS Bedrock): Used for AI note generation. Covered by a Business Associate Agreement (BAA).
Microsoft Azure: Hosting and database services. Covered by a BAA.

We do not sell, share, or disclose PHI to any third parties except as required to provide the Service or as required by law.

6. Data Retention

Clinical data is retained for as long as the user's account is active. Users may delete individual cases and dictations at any time. Upon account termination, all associated data is deleted.

7. Your Rights

You have the right to access, correct, or request deletion of your data. Contact us at privacy@chartb.ai for any privacy-related requests.

8. AI-Generated Content

All clinical notes generated by ChartB.ai are AI-assisted drafts. They must be reviewed, verified, and approved by a licensed physician before being used in any medical record. ChartB.ai does not provide medical advice.

9. Contact

For privacy inquiries: privacy@chartb.ai