Privacy Policy

This Privacy Policy explains how MediSync (the "Service") collects, uses, and protects your personal information.

1. Information we collect

We collect the following types of information:

• Account data — name, email address, and password (hashed) that you provide at registration.
• Profile data — any optional information you add to your profile, including an uploaded avatar.
• Authentication data — if you sign in via a social provider (Google, Facebook, LinkedIn), we receive your name, email, and a provider-specific ID.
• Usage data — server logs, IP addresses, browser and device information for security and diagnostics.
• Cookies — session cookies and preferences (dark mode, locale). See the "Cookies" section below.

2. How we use your information

We use your information to:

• Provide and maintain the service.
• Authenticate you and secure your account.
• Respond to support requests and communicate important changes.
• Detect, investigate, and prevent fraud or abuse.
• Comply with legal obligations.

3. Data storage and security

We store your data on secure servers and apply industry-standard practices (encryption in transit, hashed passwords, role-based access controls) to protect it. No method of transmission or storage is 100% secure, but we work to reduce risk.

4. Sharing with third parties

We do not sell your personal information. We share limited data with service providers who help us operate the service (hosting, email delivery, analytics) and only to the extent needed to perform those services.

5. Cookies

We use cookies for:

• Essential functions — session management and security. These are required to use the service.
• Preferences — dark mode, language, timezone. Stored locally in your browser.

We do not use third-party tracking or advertising cookies by default. You can control cookies through your browser settings.

6. Your rights

Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal data. To exercise these rights, contact us at the address below. We will respond within the timeframe required by applicable law.

7. Data retention

We retain your data for as long as your account is active. If you delete your account, we remove your personal information within 30 days except where retention is required for legal or compliance reasons.

8. Children's privacy

The service is not directed at individuals under 13 (or the equivalent age of digital consent in your jurisdiction). We do not knowingly collect data from children.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced by updating the "Effective" date above or by other reasonable means.

10. Contact

Questions about your data or this policy? Contact us at hello@example.com.