Privacy
Policy

Who We Are

Medigram, Inc. is a governance infrastructure company providing AI governance and compliance software for healthcare organizations. Our website at medigram.com provides information about our services, governance standards work, and organizational background.

Information We Collect

We collect information you provide directly when you submit the access request form on our homepage, hosted through Netlify Forms:

• First name, last name, email address, organization, role, primary challenge, and request type — collected via the access request form on medigram.com.

This information is used for evaluating and responding to access requests.

We do not collect health information, financial information, government identification numbers, or sensitive personal data through this website.

How We Use Contact Form Submissions

Information submitted through the contact form is used solely to respond to your inquiry. We do not sell, rent, or share contact form submissions with third parties for marketing purposes.

Netlify Forms — Third-Party Data Processor

Our contact form is processed by Netlify, Inc. (netlify.com). When you submit the form, your submission data is stored on Netlify's infrastructure. Netlify's privacy practices are governed by their Privacy Policy, available at netlify.com/privacy. By submitting the contact form, you consent to your submission being processed by Netlify.

Contact form submissions are processed by Netlify, Inc. as a data processor under their Data Processing Agreement, which is incorporated into their standard Terms of Service. Netlify does not use form submission data for their own commercial purposes. For details see netlify.com/legal.

Cookies and Tracking

This site does not use tracking cookies, advertising pixels, behavioral analytics, session recording, or retargeting scripts. Netlify may set strictly necessary technical cookies to support basic website functions; these are not used for tracking purposes.

Google Fonts

This site loads web fonts from Google Fonts. As a technical consequence, Google may receive your IP address when fonts are loaded. We do not control Google's data practices. We do not share, sell, or rent visitor data to Google or any other third party for advertising or marketing purposes.

Video Content — Netlify CDN

This site serves video content through Netlify's content delivery network. As a technical consequence of video delivery, Netlify may process your IP address to serve the video file. This is a necessary technical function of content delivery. We do not use video delivery data for tracking or advertising purposes. Netlify's privacy practices are governed by their Privacy Policy at netlify.com/privacy.

Healthcare Context — Not a Covered Entity

Medigram is a software company; it is not a covered entity or business associate under HIPAA with respect to information collected through this website. The contact form does not collect protected health information (PHI). If you are a healthcare organization inquiring about Medigram's services and you include PHI in a contact form submission, please omit it — the contact form is not an appropriate channel for PHI transmission.

This website is a business-to-business marketing site. It is not directed at patients and does not collect protected health information. The medigram.com website does not constitute a covered entity or business associate relationship under HIPAA. Governance terms for the Darwin platform are addressed separately in applicable commercial agreements.

California Residents (CCPA / CPRA)

California residents have the right to know what personal information we collect, request deletion, opt out of sale, and not be discriminated against for exercising these rights. We do not sell or share personal information collected through this website for cross-context behavioral advertising. To exercise your rights, contact us at the address below.

European Residents (GDPR)

If you are located in the European Economic Area, your personal data is processed in accordance with GDPR. Our lawful basis for processing contact form submissions is legitimate interest (responding to business inquiries). You have the right to access, rectify, erase, restrict, or port your personal data, and to object to processing. Contact us to exercise these rights.

Data Retention

Contact form submissions are retained for as long as necessary to respond to your inquiry and for our reasonable business records.

Children

This site is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have, we will delete it promptly.

Changes to This Policy

We will update this policy if our data practices change. The "Last updated" date at the top of this page reflects the date of the most recent revision.

Contact

Medigram, Inc.
Email: info@medigram.com