Privacy Policy

1. Introduction

Welcome to ConnectWave, a professional digital health communications platform ("Platform") provided by Sawda Intelligence ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform.

2. Information We Collect

2.1 Personal Information

• Name, email address, phone number
• Professional credentials and healthcare provider information
• Billing and payment information
• Account login credentials

2.2 Protected Health Information (PHI)

• Video and audio recordings of consultations (when enabled)
• Medical transcriptions and clinical notes
• Patient communication records
• Files shared during consultations

2.3 Technical Information

• IP addresses and device information
• Browser type and operating system
• Usage data and platform analytics
• Connection metadata (not content)

3. How We Use Your Information

• To provide and maintain the Platform services
• To facilitate secure video consultations and communications
• To process AI transcription and clinical insights (when authorized)
• To improve our services and develop new features
• To comply with legal obligations and regulatory requirements
• To detect and prevent fraud or security breaches
• To send administrative information and service updates

4. Data Security & Encryption

We implement industry-leading security measures to protect your data:

• End-to-End Encryption: All video, audio, and messaging communications are encrypted using AES-256 encryption
• Data at Rest: All stored data is encrypted using industry-standard protocols
• Secure Transmission: TLS 1.3 for all data in transit
• Access Controls: Role-based access and multi-factor authentication
• Regular Audits: Third-party security assessments and penetration testing
• HIPAA Safeguards: Administrative, physical, and technical safeguards as required by HIPAA

5. Data Retention

We retain your information only as long as necessary for the purposes outlined in this policy:

• Active account data: Duration of account + 7 years (HIPAA requirement)
• Video recordings: As configured by healthcare provider (default: 7 years)
• Transcriptions and clinical notes: 7 years minimum
• Technical logs: 90 days for security purposes
• Deleted account data: Securely purged within 30 days (excluding legal retention requirements)

6. Data Sharing & Disclosure

We do NOT sell your personal information. We may share data only in these circumstances:

• With Your Consent: When you explicitly authorize data sharing
• Service Providers: Trusted third parties who assist in platform operation (under strict confidentiality agreements)
• Legal Requirements: When required by law, court order, or regulatory mandate
• Business Transfers: In connection with a merger, acquisition, or asset sale (with continued privacy protection)
• Emergency Situations: To protect health and safety when legally permitted

7. Your Rights

Under HIPAA and applicable privacy laws, you have the right to:

• Access your personal and health information
• Request corrections to inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Obtain a copy of your data in a portable format
• Opt-out of certain data processing activities
• Receive an accounting of disclosures
• File a complaint with regulatory authorities

To exercise these rights, contact us at: privacy@sawdaintelligence.com

8. Local Deployment & Data Sovereignty

For organizations using our on-premise or local deployment options:

• All data remains within your controlled infrastructure
• You maintain full ownership and control of all PHI
• No data is transmitted to external servers without explicit configuration
• Data sovereignty requirements are fully respected

9. International Data Transfers

If you are accessing our services from outside the country where our servers are located, your data may be transferred internationally. We ensure appropriate safeguards are in place through Standard Contractual Clauses and other legally recognized transfer mechanisms.

10. Children's Privacy

Our Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have collected information from a minor, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or platform notification. Your continued use of the Platform after changes constitute acceptance of the updated policy.

12. Contact Information

For questions about this Privacy Policy or our privacy practices:

• Email: privacy@sawdaintelligence.com
• Phone: +1 (647) 802-4344 or +1 (647) 917-0299
• Address: Sawda Intelligence, Privacy Department
• HIPAA Privacy Officer: privacy-officer@sawdaintelligence.com