Privacy Policy

1. Information We Collect

We collect information you provide directly to us, including:

• check_circleContact information (name, email address, phone number)
• check_circleMedical records, imaging files, pathology reports, and other health documents you upload for your second opinion
• check_circlePayment information (processed securely through Stripe — we do not store card numbers)
• check_circleCommunications you send us via email or inquiry forms

2. How We Use Your Information

We use your information to:

• check_circleDeliver your requested medical second opinion by matching you with the appropriate U.S. specialist
• check_circleCommunicate with you about your case, reports, and follow-up questions
• check_circleProcess your payment securely through Stripe
• check_circleImprove our platform and services
• check_circleComply with applicable legal and regulatory obligations

3. Medical Information

Medical records and health documents you submit are treated with the highest level of confidentiality. They are shared only with the U.S. specialist assigned to your case and are never sold or shared with third parties for marketing purposes. We use secure, encrypted storage and transmission for all medical data. Records submitted by patients outside the United States are transferred to HIPAA-compliant servers located in the United States for review by our U.S.-based specialists. This cross-border transfer is necessary to deliver the service and is conducted using encrypted, secure channels. By submitting your records, you consent to this transfer.

3a. Applicable Privacy Laws

As a U.S. company, we comply with the U.S. Health Insurance Portability and Accountability Act (HIPAA) for all protected health information handled by our U.S.-based specialists. HIPAA provides strong federal protections for your medical records, including restrictions on use and disclosure and your right to access your data. If you are located outside the United States, please note that your data will be processed under U.S. law. You may contact us at any time to exercise your data rights as described in Section 7.

4. Sharing of Information

We do not sell your personal information. We may share your information with:

• check_circleU.S. board-certified specialists who review your case on our platform
• check_circleStripe, our payment processor, for secure transaction processing
• check_circleService providers who help us operate our platform (under confidentiality agreements)
• check_circleLegal authorities when required by law

5. Cookies and Analytics

We use Google Analytics to understand how visitors use our website. This collects anonymized usage data (page views, session duration, geographic region) and does not identify you personally. Analytics data is processed on Google's servers in the United States and is governed by Google's Privacy Policy.

6. Data Retention

We retain your personal and medical information for as long as necessary to deliver your service and comply with applicable laws. You may request deletion of your data at any time by emailing us at info@tidbithealth.in.

7. Your Rights

You have the right to:

• check_circleAccess the personal information we hold about you
• check_circleRequest correction of inaccurate information
• check_circleRequest deletion of your data
• check_circleWithdraw consent for processing at any time
• check_circleLodge a complaint with a relevant data protection authority

8. Security

We implement industry-standard security measures including TLS encryption, secure file transfer protocols, and access controls to protect your information. No method of transmission over the internet is 100% secure; however, we strive to use commercially acceptable means to protect your data.

9. Contact Us