Privacy Policy

1. Introduction

Krasyn Inc. ("Krasyn", "we", "us", or "our") operates the EMRAI electronic medical records platform. This Privacy Policy describes how we collect, use, disclose, and protect your information when you use our services.

2. Information We Collect

We collect information that you provide directly to us, including:

• Account registration information (name, email, organization)
• Clinical data entered into the EMR system
• Usage data and system interaction logs
• Communications with our support team

3. Protected Health Information (PHI)

EMRAI processes Protected Health Information (PHI) as defined under the Health Insurance Portability and Accountability Act (HIPAA). All PHI is handled in accordance with HIPAA requirements and our Business Associate Agreement (BAA) with covered entities.

We implement administrative, physical, and technical safeguards to protect PHI, including:

• Encryption in transit (TLS 1.2+) and at rest
• Role-based access controls
• Audit logging of all PHI access
• Automatic session timeout after 30 minutes of inactivity

4. How We Use Your Information

We use collected information to:

• Provide and maintain the EMR platform
• Authenticate and authorize user access
• Generate audit trails for compliance
• Improve platform performance and features
• Communicate service updates and security notices

5. Data Retention

Clinical records are retained in accordance with applicable state and federal regulations. Account data is retained for the duration of the service agreement and as required by law.

6. Data Security

We employ industry-standard security measures including encryption, access controls, and continuous monitoring. Our infrastructure is hosted on Google Cloud Platform with HIPAA-eligible services.

7. Your Rights

You have the right to:

• Access your personal information
• Request correction of inaccurate data
• Request deletion of your account (subject to legal retention requirements)
• Receive an accounting of PHI disclosures

8. Contact Us

For privacy-related inquiries, contact us at privacy@krasyn.com.