Tekvida ("Tekvida," "we," "us," or "our") provides clinic management software to healthcare organizations. This Privacy Policy explains what information we collect, how we use and protect it, and the choices you have. It applies to our marketing website and to the Tekvida application. This policy is provided for general informational purposes and does not constitute legal advice.
1. Information We Collect
We collect the following categories of information:
- Account & organization data — names, email addresses, roles, clinic details, and authentication data for the users who administer and operate a clinic on Tekvida.
- Protected Health Information (PHI) — patient records, appointments, clinical documentation, consents, and billing data that your clinic enters into the platform. This information is controlled by your clinic; Tekvida processes it on the clinic's behalf.
- Billing & payment data — subscription and payment details, processed through our payment providers (we do not store full card numbers).
- Usage & technical data — log data, device and browser information, IP address, and audit records generated as you use the service.
2. How We Use Information
We use information to:
- Provide, maintain, secure, and improve the Tekvida platform;
- Authenticate users and enforce role-based access control;
- Process subscriptions and payments;
- Send service-related communications such as reminders, receipts, and security notices;
- Maintain audit logs and detect, prevent, and respond to security incidents;
- Comply with legal obligations.
We process PHI only as needed to provide the service to your clinic and in accordance with our agreements with that clinic. We do not sell personal information or PHI.
3. Our HIPAA Compliance
Tekvida is HIPAA compliant. Where Tekvida acts as a business associate for a covered entity, we handle PHI in accordance with the applicable Business Associate Agreement (BAA). Safeguards built into the platform include encryption of data in transit and at rest, multi-factor authentication, role-based access control, and detailed audit logging.
HIPAA compliance is shared between Tekvida and each clinic that uses it. Tekvida safeguards PHI within the platform; clinics remain responsible for their own compliance obligations, including how their staff use the service and obtaining a BAA where required.
5. Data Security
We use administrative, technical, and physical safeguards designed to protect information, including encryption, MFA, access controls, and audit logging. No system is perfectly secure, but we work continually to protect your data and to respond promptly to any incident.
6. Data Retention
We retain information for as long as your clinic's account is active or as needed to provide the service, and thereafter as required to comply with legal obligations, resolve disputes, and enforce our agreements. Clinics may request export or deletion of their data subject to legal and contractual requirements.
8. Your Rights & Choices
Depending on your location, you may have rights to access, correct, delete, or port your personal information, or to object to or restrict certain processing. Because much of the PHI in Tekvida is controlled by your clinic, patients should direct such requests to the clinic that maintains their records; we will support the clinic in responding.
9. Children's Information
Tekvida is intended for use by healthcare organizations and their staff. Any patient information—including that of minors—is entered and controlled by the clinic in the course of providing care, consistent with applicable law.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice.
11. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us.