1. Scope
This Privacy Policy describes how DRootDx handles information on this public website. The protected clinical application has additional privacy and security controls presented to its authorized users. This public website is not intended for the submission of patient information, medical records, or urgent care requests.
2. Information this website collects
The public DRootDx website may collect the clinic name, Clinic Owner name and email, selected clinician-seat quantity, trial eligibility information, and information needed to begin Stripe Checkout. DRootDx does not collect or store payment-card details entered on Stripe's hosted checkout page. Hosting, security, and fraud-prevention systems may process limited technical information such as IP address, device and browser characteristics, requested pages, timestamps, and security events to operate and protect the service, prevent duplicate trials, and troubleshoot the site. DRootDx does not sell this information or use it to create advertising profiles or marketing mailing lists.
3. Clinical and patient information
Do not submit protected health information through this public website or ordinary email. Patient and clinical information is handled only through authorized workflows in the protected application and according to the applicable clinic’s notices, agreements, and legal obligations.
4. Transactional email
DRootDx may send expected one-to-one transactional messages for secure intake invitations, authorized account setup, requested password resets, and reminders tied to an existing workflow. We do not use purchased, rented, or scraped address lists. Message content is kept minimal and secure links are designed to expire. Every message provides a monitored reply path. Unexpected-email, abuse, or delivery concerns can also be reported through the public contact form on the DRootDx home page; do not include protected health information in that form.
5. How technical information is used
Limited technical information may be used to:
- Deliver and maintain the website;
- Detect abuse, fraud, and security incidents;
- Diagnose reliability and performance problems; and
- Comply with applicable legal obligations.
6. Service providers and disclosure
We may use hosting, security, infrastructure, and transactional communication providers to operate DRootDx. They receive only the information reasonably necessary to provide their services. We do not sell personal information collected through this public site. Information may be disclosed when required by law or necessary to protect users, the public, or our systems.
7. Medical records and retention
RootQ maintains patient charts, encounters, and original documents as a longitudinal medical record. Clinical records are retained for ongoing care in accordance with the clinic’s applicable agreements and retention obligations.
The clinic determines the retention requirements that apply to its records. Administrative, billing, consent, and security records are retained for their applicable service, audit, and legal purposes.
8. What happens when an account closes
Subscription cancellation stops future renewal according to the billing terms. Account closure, record export, and any request for record return or deletion are handled separately with the authorized Clinic Owner under the applicable agreements, retention obligations, and any legal hold.
Contact DRootDx to coordinate access and export before closing an account. Do not include patient information in the public contact form. Record retention, authorized disposition, and backup handling follow the applicable agreements and documented process.
9. Your choices
If you receive a DRootDx transactional message in error, do not use its secure link. Contact the clinic or organization identified in the message. Requests concerning clinical records should be directed to the clinic responsible for those records.
10. Children
This public website is directed to professional and general adult audiences and is not designed to collect information directly from children.
11. Changes to this policy
We may update this policy as DRootDx develops. The effective date above will be updated when material changes are published.
12. Contact
Questions about this public website or this policy may be directed through the organization or clinic that provided your DRootDx communication. Do not include medical information in an ordinary email inquiry.
FogScore records and privacy
FogScore stores account information, raw task measurements, task and scoring versions, and testing-condition metadata. Clinic-assigned records also contain participant name and date of birth. Consumer records use an independent account scope and are not automatically shared with clinics.
Clinic access is limited to authorized members of that organization, with separately restricted platform administration. Reports and exports require authorization. Participant names and results are not included in payment metadata or sent to advertising trackers. Stripe handles card details. Audio and video are never recorded.
The introductory task runs locally without saving results to an account. Account holders may export their saved records. Explicit clinic cancellation provides 14 days to export before removal. No new free-scored-clinic trial is offered; existing records are preserved.