Privacy Notice
This notice explains what information Golden Observer LLC ("we") handles through this website, observer.clinic, and in providing Medical Observer to clinics. It is short because we collect very little.
This website
- No tracking. The site sets no tracking cookies, runs no analytics or advertising scripts, and has no accounts or forms.
- Delivery and security. The site is delivered through Cloudflare, which processes technical information such as your IP address and browser type to deliver the pages and protect the site from attacks. Cloudflare's handling is described in its privacy policy. Our own server keeps short-lived technical logs for security only.
- Email. If you email us, we receive your address and what you write, and use it only to reply and to follow up about Medical Observer. We do not sell or share it. Please do not send patient information by email.
Clinics that use Medical Observer
- Recordings stay at the clinic. Audio, transcripts and reports are kept on the device in the clinic's office. We cannot open them on the device. Sharing is off by default: none of them is sent to us unless the clinic turns on training mode (a de-identified daily text report) or Listen and correct (staff-only conversations the clinic has checked); see the User Agreement, Section 5.
- The clinic is in charge. The clinic decides who may use the device, how long recordings are kept, and when they are deleted. Patients with questions about recordings should ask the clinic, which is responsible for its patients' information under HIPAA.
- Business Associate Agreement. We sign a Business Associate Agreement with every clinic. It sets out our obligations for protected health information.
- What we do keep. Business contact details of the clinic's staff who deal with us, signed agreements, invoices, and a record of the devices we have supplied. If a clinic types an email address on its device to be told the device's network address, we keep that address, the device's serial number and when the address was confirmed, so our server can send that one email; it never contains anything the device has heard. If a clinic turns on training mode, we keep the de-identified daily reports its device sends, and with Listen and correct, the staff-only conversations it shares, with their audio. If a clinic ticks the Leak Finder box on its order form, we keep the totals its device sends for the first 90 days: counts and dollar amounts, with no names, recordings or transcripts.
- What we do with what a clinic shares. It reaches our server over an encrypted connection. We use it only to train and improve Medical Observer, for example how well it transcribes and summarizes a clinic's day and its reports on callbacks, workload and workflow. We do not sell it, and we do not use it to identify, contact or profile anyone (User Agreement 5.7).
What we do not do
- We do not sell personal information, share it for cross-context behavioral advertising, or use it for profiling.
- We do not use third-party analytics, advertising pixels or social-media trackers on this site.
- Do Not Track. Because the site does not track visitors across sites or over time, it behaves the same whether or not your browser sends a Do Not Track or Global Privacy Control signal.
How long we keep information
- Emails: as long as needed to answer and follow up.
- Business records: while a clinic is a customer, and for up to seven years afterward for tax and legal purposes.
- Server security logs: up to 30 days.
- Clinic recordings: kept on the clinic's device for as long as the clinic chooses.
- A staff-only conversation a clinic shares with us: kept until the clinic withdraws it or we no longer need it for training (User Agreement 5.7).
Security
The site is served only over encrypted connections (HTTPS). We limit access to our business records to the people who need them. No method of transmission or storage is perfectly secure; if we learn of a breach affecting your information, we will notify you as the law requires.
Your choices
You may ask us what information we hold about you, ask us to correct it, or ask us to delete it, by writing to the address below. We will answer within 30 days. Residents of states with their own privacy laws — such as California, Oregon and Washington — have the additional rights those laws give them, including the right to know, correct, delete, or opt out of sale or targeted advertising, and to appeal our decision. We will not discriminate against anyone for using these rights. An authorized agent may make a request for you with your written permission.
Children
This site is for businesses and is not directed to children.
Changes
If we change this notice, we will post the new version here with its effective date.
Contact
Golden Observer LLC · Ashland, Oregon · [email protected]