Privacy Policy

1. Overview

Celia EMRx (“we,” “our,” or “us”) is a clinical decision support platform designed exclusively for licensed healthcare providers. This Privacy Policy explains what information we collect, how we use it, with whom we share it, and the rights you have regarding your data. By accessing or using the Celia EMRx platform, you agree to the practices described in this policy.

2. Information We Collect

We collect the following categories of information in order to operate the platform:

• Account information: name, professional credentials, practice name, email address, and password used to create and maintain your Celia EMRx account.
• De-identified clinical context: age, sex, weight, treatment category, and similar non-identifying parameters you submit when requesting protocol recommendations. We do not collect or store patient names, dates of birth, contact information, or other personally-identifiable patient information.
• Usage data: pages visited, features used, search queries, session duration, and device/browser information collected automatically as you use the platform.
• Communications: messages you send to our support team or through in-platform feedback channels.

3. HIPAA & Protected Health Information

Celia EMRx is designed to operate without the transmission or storage of Protected Health Information (PHI) as defined by the Health Insurance Portability and Accountability Act of 1996 (HIPAA). Specifically:

• Patient-identifiable information must not be entered into any Celia EMRx input field, chat interface, or clinical note workflow.
• Clinical context transmitted to the Celia evidence engine (e.g., age, sex, weight) is de-identified and does not constitute PHI.
• You, as the licensed prescriber, are responsible for ensuring that your use of the platform complies with HIPAA, applicable state medical-privacy laws, and your organization's privacy policies.

If your organization requires a Business Associate Agreement (BAA) before using Celia EMRx, please contact us at privacy@celiaone.ai.

4. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Celia EMRx platform
• Authenticate your identity and manage your account
• Generate evidence-graded protocol recommendations and clinical content via the Celia engine
• Send transactional communications (account confirmations, security alerts, policy updates)
• Conduct anonymized analytics to understand platform usage and improve clinical content quality
• Comply with legal obligations and enforce our Terms & Conditions

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5. Information Sharing & Disclosure

We may share your information only in the following circumstances:

• Service providers: trusted third-party vendors who assist in operating the platform (e.g., cloud hosting, authentication, email delivery) under strict confidentiality obligations.
• Celia evidence engine: de-identified clinical context is transmitted to celiaone.ai to generate recommendations. No PHI or account information is shared with the Celia engine.
• Legal requirements: we may disclose information when required by law, court order, or governmental authority, or to protect the rights, property, or safety of Celia EMRx, its users, or the public.
• Business transfers: in the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity under equivalent privacy protections.

6. Data Retention

We retain account information for as long as your account remains active. De-identified clinical context submitted for recommendation generation is not stored after a session ends. Usage logs are retained for up to 24 months to support platform security and improvement efforts. You may request deletion of your account data at any time by contacting privacy@celiaone.ai.

7. Data Security

Celia EMRx employs industry-standard security measures to protect your information, including TLS encryption in transit, access controls, and regular security reviews. No system is completely secure; in the event of a data breach that affects your personal information, we will notify you as required by applicable law.

8. Cookies & Tracking

Celia EMRx uses session cookies and similar technologies to authenticate users and maintain secure sessions. We may use anonymized analytics tools (without cross-site tracking) to understand aggregate platform usage. We do not use advertising trackers or sell behavioral data.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your account and associated data
• Object to or restrict certain processing activities
• Receive a portable copy of your data

To exercise any of these rights, contact us at privacy@celiaone.ai. We will respond within the timeframe required by applicable law.

10. Children's Privacy

Celia EMRx is intended solely for licensed healthcare professionals and is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-platform notification at least 30 days before they take effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related questions, data requests, or to inquire about a Business Associate Agreement, please contact: