Privacy Policy

Overview

DermVault is a skin assessment platform for clinics. Patient health records are hosted in Canada and handled in line with Alberta's Health Information Act and the federal Personal Information Protection and Electronic Documents Act (PIPEDA). Sign-in (WorkOS), SMS (Twilio), online checkout and shipping (Shopify), and AI assistance on de-identified or scrubbed text (Anthropic) are processed outside Canada. Email is sent from Canada.

What we collect

• Account information (name, email, phone) for authentication and notifications.
• Health information you submit through questionnaires, including allergy and medication history.
• Assessment results and treatment recommendations associated with your clinic.
• Usage and audit logs kept to meet privacy and security obligations.

How we protect your data

All PHI is encrypted in transit and at rest. Access is restricted to authorized clinic staff via role-based access control. We have written agreements with the service providers that process personal information on our behalf. AI-driven recommendations are generated from de-identified data only.

Your rights

You may request a copy, correction, or deletion of your information by contacting your clinic or emailing info@dermvault.ca.

Contact

Questions about this policy can be sent to info@dermvault.ca.