Privacy Policy
Effective March 15, 2026 · Last updated November 3, 2026
Deembyte LLC, a limited liability company registered in the State of Wyoming, United States ("Deembyte," "Company," "we," "us," or "our"), operates the RxCompose platform. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our Service. It also describes the rights you may have with respect to your personal information.
By using the Service, you agree to the practices described in this Privacy Policy.
Who This Policy Covers
This Policy applies to Clinicians and other authorized individuals who register for and use the RxCompose Service. The Service is intended exclusively for licensed medical professionals and is not directed to patients, the general public, or individuals under the age of 18. We do not knowingly register an account for, or knowingly collect account-registration information directly from, anyone under 18.
This age restriction applies to account holders (Clinicians), not to patient information entered by a Clinician about the patients in their care. Patient records you enter may include minors, since the Service is used to document and support treatment of patients of any age. Clinicians who enter patient information into the Service do so as data controllers or equivalent in their own right, and are responsible for ensuring they have appropriate authority and consent, where required, to enter patient data into the Service, including any additional consent or parental/guardian authorization required under applicable law when the patient is a minor.
Information We Collect
2.1 Account and Profile Information
When you register, we collect:
- ·Name (first and last)
- ·Email address
- ·Authentication method (email/password or Google sign-in)
After registration, we also store your active medical specialty (which you select and can change at any time in your account settings) and your account's region, which determines which features are available to you.
2.2 Patient Information You Enter
As part of using the Service, you enter patient information on behalf of your clinical practice. This may include:
- ·Patient name, date of birth, gender, contact number, weight, and height (all required to register a patient), and pregnancy status for female patients
- ·Clinical information such as presenting symptoms, vital signs, current medications, allergies, medical history, and relevant diagnoses
- ·Laboratory values and investigation results
- ·Laboratory report images, imaging/scan report images, and clinical photos you upload
This information is entered by you and is processed to provide the Service to you. We act as a processor of this information on your behalf.
2.3 AI Interaction Data
When you use AI-assisted features, the clinical information you enter is submitted to our AI processing systems to generate outputs. We may retain records of these transactions for service operation, quality assurance, and audit purposes.
2.4 Usage and Technical Data
We automatically collect certain information when you use the Service, including:
- ·IP address
- ·Approximate geographic location derived from IP address (country and city level)
- ·Browser and device type
- ·Date and time of last activity per session
2.5 Payment and Billing Information
If you subscribe to a paid plan, our payment processor collects your payment card details and billing address directly. We do not store full card numbers. We may retain limited billing-related information such as subscription status, billing period, and partial card identifiers (e.g., last four digits of card, card brand) for account management purposes.
2.6 Communications and Feedback
If you contact us via the support chat or contact form, or submit feedback through the Service, we collect the content of that communication, along with your email address and any other information you provide.
How We Use Information
We use the information we collect to:
- ·Provide and operate the Service, including generating AI-assisted clinical outputs, managing your patients and records, and producing PDF prescription documents;
- ·Authenticate your identity and maintain the security of your account;
- ·Process payments and manage your subscription;
- ·Communicate with you about your account, subscription, security events, and updates to the Service or these policies;
- ·Respond to support requests and feedback;
- ·Maintain audit logs of access to and actions taken on clinical data, for security and operational integrity;
- ·Analyze usage patterns at an aggregate level to improve the Service;
- ·Comply with applicable legal obligations and respond to lawful requests from authorities;
- ·Detect and prevent misuse, fraud, or unauthorized access to the Service.
We do not use identifiable patient data to train our AI models or for purposes beyond providing the Service to you and your practice, unless we have your separate consent or are required to do so by law.
Legal Bases for Processing
Where applicable data protection laws require us to identify a legal basis for processing personal data, we rely on the following:
- ·Contract performance: Processing necessary to provide the Service you have subscribed to;
- ·Legitimate interests: Maintaining security, detecting fraud, operating and improving the platform, and maintaining audit records;
- ·Legal obligation: Complying with applicable laws and responding to lawful requests;
- ·Consent: Where we request your specific consent for any processing not covered above.
Where applicable law requires a separate lawful basis for processing health-related or other sensitive categories of personal data entered by Clinicians on behalf of their patients, Clinicians are responsible for ensuring their own lawful basis for collecting and sharing such data with the Service.
AI Features and Automated Processing
When you use AI-assisted prescription or report interpretation features, your clinical input is processed by automated AI systems to produce suggested outputs. These outputs are intended as decision support for licensed clinicians and are not autonomous clinical determinations.
We do not make fully automated decisions about patients or Clinicians that produce legal or similarly significant effects without human review.
AI outputs may not account for all clinically relevant factors. Clinicians are solely responsible for reviewing, verifying, and acting upon any AI-generated content.
Sensitive and Health-Related Data
The patient information you enter into the Service may include health and clinical data, which is a special or sensitive category of personal information under many data protection laws.
We process this information only to provide the Service to you as a Clinician. We maintain access controls and audit logging to limit and record who accesses clinical data and when.
Clinicians remain responsible for matters within their own control, including obtaining any required patient consent or authorization. We maintain administrative, technical, and organizational safeguards designed to protect clinical data, including signed data-processing agreements with our infrastructure and AI service providers.
International Data Transfers
Your information and patient data may be transferred to and processed in countries other than the country in which you are located — for example, our infrastructure and service providers may be based in the United States while you access the Service from Pakistan. These countries may have data protection laws that differ from those in your jurisdiction.
Where required by applicable law, we implement appropriate safeguards for such cross-border transfers of information.
Data Retention
We retain your account information and clinical data for as long as your account is active and as needed to provide the Service.
Account deletion: If you request deletion of your account, your account will be scheduled for permanent deletion. A grace period of thirty (30) days applies during which you may cancel the deletion. After the grace period, your account and associated data will be permanently deleted.
We may retain certain information for longer periods where required by law, for fraud prevention, or to resolve disputes. Aggregated or anonymized records from which you cannot reasonably be identified may be retained beyond these periods. Our standard retention schedules are as follows:
| Data Category | Retention Period |
|---|---|
| Clinical and patient records | 8 years after last interaction, or until the patient turns 25 if they were a minor at the time of treatment, whichever is later |
| Billing and payment records | 7 years |
| Audit logs | 7 years |
| Support chat messages | 1 year |
| Account data | Deleted after the 30-day grace period upon account deletion |
Data Security
We implement administrative, technical, and organizational measures designed to protect your information and patient data against unauthorized access, disclosure, alteration, and destruction. These measures include access controls, encrypted session management, rate limiting, account lockout protections, and audit logging of access to clinical data.
No method of transmission over the internet or electronic storage is completely secure. We cannot guarantee the absolute security of your information.
If you believe there has been unauthorized access to your account, please contact us immediately at [email protected].
Your Privacy Rights and Choices
Depending on your location and applicable law, you may have the following rights with respect to your personal information:
- ·Access: Request a copy of the personal information we hold about you.
- ·Correction: Request that we correct inaccurate or incomplete information.
- ·Deletion: Request deletion of your account and associated personal data (subject to the grace period described in Section 10 and legal retention obligations).
- ·Data Portability: Export your data in a machine-readable format using the data export feature available within your account settings.
- ·Objection / Restriction: Object to or request restriction of certain processing of your personal information, where permitted by applicable law.
- ·Withdrawal of Consent: Where processing is based on consent, withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at [email protected]. We will respond within the timeframe required by applicable law.
Note: Rights with respect to patient data entered by a Clinician may be governed by the Clinician's obligations to their patients rather than by us directly.
Third-Party Services
The Service integrates with third-party services such as Google for authentication and Stripe for payment processing. This Privacy Policy does not govern those third-party services. We encourage you to review the privacy policies of any third-party services you use in connection with the Service.
Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you via the email address on your account or through the Service. We encourage you to review this Policy periodically. The "Last Updated" date at the top indicates when this Policy was most recently revised. Continued use of the Service following notice of changes constitutes acceptance of the updated Policy.
Contact Us
For questions, concerns, or to exercise your privacy rights, please contact us:
- ·Deembyte LLC
- ·1309 Coffeen Avenue STE 1200, Sheridan, WY 82801, United States
- ·Support & privacy enquiries: [email protected]