Privacy Policy
Last updated: January 2025
1. Introduction
MedSafe ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, profession, license number, institution
- Payment Information: Processed securely through Paystack (we do not store full card details)
- Professional Credentials: License documents for verification purposes
- Usage Data: Drug searches, calculator inputs, interaction checks (anonymized for analytics)
2.2 Automatically Collected Information
- Device Information: IP address, browser type, operating system
- Usage Analytics: Pages visited, features used, time spent on platform
- Cookies: Session cookies, preference cookies, analytics cookies
3. How We Use Your Information
We use your information to:
- Provide and maintain the Service
- Process your subscription and payments
- Verify your professional credentials
- Send important updates and notifications
- Improve our platform through analytics
- Provide customer support
- Comply with legal obligations
- Prevent fraud and abuse
4. Data Sharing and Disclosure
We do NOT sell your personal information. We may share your information with:
- Service Providers: Payment processors (Paystack), hosting providers, analytics services
- Legal Requirements: When required by law or to protect our rights
- Business Transfers: In the event of a merger or acquisition
- With Your Consent: When you explicitly authorize sharing
5. Data Security
We implement industry-standard security measures including:
- AES-256 encryption for data at rest
- TLS/SSL encryption for data in transit
- Two-factor authentication (2FA)
- Regular security audits and penetration testing
- Access controls and authentication
- Secure backup and disaster recovery
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide services. You can request account deletion at any time, after which we will:
- Delete your personal information within 30 days
- Anonymize usage data for analytics
- Retain financial records as required by law (7 years)
7. Your Rights
You have the right to:
- Access: Request a copy of your personal data
- Correction: Update inaccurate information
- Deletion: Request deletion of your account and data
- Export: Download your data in a portable format
- Opt-out: Unsubscribe from marketing emails
- Object: Object to certain data processing activities
8. Cookies and Tracking
We use cookies for:
- Essential Cookies: Required for platform functionality
- Preference Cookies: Remember your settings and preferences
- Analytics Cookies: Understand how you use the platform
You can control cookies through your browser settings.
9. Third-Party Services
We use the following third-party services:
- Paystack: Payment processing
- Cloudflare: CDN and security
- Sentry: Error tracking
- Google Analytics: Usage analytics (anonymized)
Each service has its own privacy policy governing their use of your information.
10. Children's Privacy
MedSafe is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children.
11. International Data Transfers
Your information may be transferred to and processed in countries other than Nigeria. We ensure appropriate safeguards are in place for such transfers.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the platform. Continued use after changes constitutes acceptance.
13. Contact Us
For privacy-related questions or to exercise your rights, contact us at:
Email: privacy@medsafe.com.ng
Data Protection Officer: dpo@medsafe.com.ng
14. Compliance
MedSafe complies with:
- Nigeria Data Protection Regulation (NDPR)
- General Data Protection Regulation (GDPR) principles
- Healthcare data protection best practices