Privacy Policy

Last updated: October 19, 2026

1. Introduction

Great Drs LLC ("Great Drs", "we", "our", or "us") is committed to protecting your privacy and safeguarding your personal and medical information. This Privacy Policy explains what data we collect, how we use it, and what rights you have.

This policy applies to all users of the Great Drs platform — patients, doctors, hospitals, interpreters, and referrers — across our websites (including greatdrs.com) and related services.

2. Data We Collect

• Account information: Name, email address, mobile phone number, role, and login credentials.
• Medical information: Diagnoses, procedures, treatment notes, and uploaded medical documents (collected only from patients who explicitly provide this data for care coordination purposes).
• Payment information: Billing details processed securely via Stripe or PayPal. We do not store raw card numbers.
• Usage data: Pages visited, features used, device type, and IP address (used to improve platform performance and detect fraud, subject to your cookie consent).
• Communications: Messages sent through the platform between patients and providers.
• Early-access requests: If you request access on greatdrs.com, we keep the email address you enter only to contact you about access to the platform. You can ask us to delete it at any time.

3. How We Use Your Information

• Provide, operate, and improve the Great Drs platform and its services.
• Facilitate medical care coordination between patients and providers.
• Process payments and manage financial transactions.
• Send you notifications relevant to your account, cases and appointments, by email, in the app, and — only if you opt in — by text message.
• Comply with applicable legal obligations.
• Detect and prevent fraud and abuse.

4. HIPAA Compliance

Great Drs operates in compliance with the Health Insurance Portability and Accountability Act (HIPAA). All protected health information (PHI) is stored in encrypted form and access is strictly limited to authorized personnel and the treating providers of each case.

We execute Business Associate Agreements (BAAs) with all third-party vendors who may have access to PHI. PHI is never used for advertising or sold to any third party.

5. Cookie Policy

We use three categories of cookies. You can manage your preferences at any time using the preference center in the platform footer.

• Strictly Necessary Cookies: Required for authentication, security, fraud prevention, and payment processing. These cannot be disabled.
• Analytics & Performance Cookies: Used anonymously to understand site traffic and improve the user experience. Enabled only with your consent.
• Marketing & Personalization Cookies: Allow us to show relevant Great Drs content on third-party platforms. Specific medical search terms are strictly blocked from being shared with advertising networks. Enabled only with your explicit consent.

6. Information Sharing

We do not sell your personal data. We share information only in these circumstances:

• Treating providers: Doctors, hospitals, and interpreters assigned to your case receive the clinical information necessary to deliver care.
• Service providers: Trusted third parties (payment processors, cloud infrastructure, email and text-message delivery) under strict data processing agreements.
• Legal requirements: When required by law, court order, or governmental authority.

Text messages: mobile numbers and text-message opt-in data and consent are not shared with third parties or affiliates for marketing or promotional purposes. They are used only to send the account notifications you turned on, through the provider that delivers them. See our SMS Terms.

7. Your Rights (International / GDPR)

If you are located in the European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR):

• Access: Request a copy of the data we hold about you.
• Rectification: Request corrections to inaccurate data.
• Erasure: Request deletion of your data ("right to be forgotten").
• Restriction: Request that we limit processing of your data.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to certain types of processing.

To exercise any of these rights, email us at privacy@greatdrs.com.

8. California Consumer Privacy Act (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA) / CPRA, including the right to:

• Know what personal information is collected and how it is used.
• Delete personal information we have collected (subject to certain exceptions).
• Opt out of the "sale" or "sharing" of personal information, using the "Do Not Sell or Share My Personal Information" link in the platform footer.
• Non-discrimination for exercising your privacy rights.

Great Drs does not sell personal information. The "Do Not Sell or Share" link controls third-party marketing and analytics cookies.

9. Data Retention

We retain personal data for as long as necessary to provide our services and comply with legal obligations. Medical records are retained according to applicable healthcare regulations. You may request deletion of your account and associated data at any time, subject to our legal obligations.

10. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact our Privacy Team:

Great Drs LLC · 8 The Green, Ste A, Dover, DE 19901 · privacy@greatdrs.com