Privacy policy

Scope and audience

The Company provides medical document processing, summarization, and analysis services to institutional and business clients, including insurance carriers, law firms, and medical practitioners. The website also carries contact forms for general inquiries.

Consent and source of information

Business clients, or anyone acting on their behalf, provide information to us so that we can deliver the Services; we also collect information through the contact forms on this website. Providing information is voluntary, but without it we may be unable to deliver the Services. Where the information concerns a third party — an insured individual, for example — responsibility for ensuring that the transfer is lawful rests entirely with the client transmitting it.

Types of information we collect

• Medical documents — may include personal and medical information about data subjects.
• Contact form details — name, email address, phone number, and the content of the inquiry, used solely to answer it.
• Technical usage data — IP address, browser type, operating system, access times, and similar.
• Cookies and tracking tools — as set out in the dedicated section below.

Purposes of use

• Processing and summarizing medical documents.
• Answering inquiries submitted through the contact forms.
• Improving our services, operations, and support.
• Producing statistical and analytical insight, using aggregated or non-identifiable data where required.
• Meeting legal requirements, preventing fraud, and maintaining data security.
• Direct marketing, subject to opt-in consent, with the ability to opt out at any time.

Use of artificial intelligence (AI)

The Services may use AI technologies for data processing, automation, and service improvement. We are committed to using these tools responsibly — protecting the privacy of the data and guarding against bias. Please do not upload information you are not legally authorized to upload.

Data retention and deletion

• We retain personal information for as long as it is needed to deliver the Services, provide support, or meet a legal obligation.
• Clients may request deletion of their data at any time.
• Without such a request, personal information may be retained for up to 12 months from the date we receive it, after which it is deleted.
• Contact form submissions are retained for up to 12 months, unless applicable law requires a longer period.
• Aggregated or non-identifiable data may be retained indefinitely for research, statistical analysis, and service improvement.

Sharing information with third parties

We transfer personal information only in the following circumstances:

• To technical service providers — cloud infrastructure, security, monitoring — under confidentiality and data security agreements.
• Where required by law, court order, or regulatory direction.
• To protect the rights of the Company or of a third party.
• In a merger, acquisition, or corporate reorganization, provided the acquiring entity commits to the terms of this Policy.

Information that does not identify a person may be shared with third parties for research, statistical analysis, and service improvement.

Transfer of data outside Israel

Where information is stored or processed outside Israel — on cloud servers, for example — the Company applies appropriate safeguards in accordance with legal requirements.

Data security

The Company operates organizational and technical security controls: encryption, access controls, logical separation, and monitoring. No system, however, is entirely immune.

Your responsibility as a user or client: secure the devices you use (passwords or biometrics, auto-lock, current security updates), never share access credentials, and report any unauthorized access to us promptly.

Cookies, web beacons, and tracking tools

The Company uses cookies and analytics tools, such as Google Analytics and Meta/Facebook, to operate the site, keep it secure, improve the user experience, and support marketing. You can block or delete cookies in your browser settings, though doing so may affect how parts of the site work.

Direct marketing

We send updates and marketing content only with your consent. You can unsubscribe at any time using the link in the message, or by contacting us directly.

Links to external websites

The Services may link to third-party websites. We are not responsible for the privacy policies or practices of those third parties, and use of external sites is at your own risk.

Data subject rights

Under applicable law, you have the right to review the personal information we hold about you, request its correction or deletion, and object to its use for direct marketing. The Company responds to such requests within 30 days of receipt, subject to applicable law.

Databases

Information is held in databases for which One-Doc is responsible, managed in compliance with Israeli law. Where registration of a database is legally required, the Company registers it.

Changes to this policy

The Company may update this Policy from time to time. Updates are posted on the website and take effect on publication. Continued use of the Services indicates acceptance of the updated Policy.