Privacy notice

MediVox AS is the data controller for information about website visitors, account users, contacts, and other business relationships when we determine the purpose of processing.

For patient information processed in MediVox V4, the healthcare provider is normally the data controller. MediVox normally acts as a data processor under documented instructions in the data processing agreement.

We process information to deliver and secure the service, administer accounts and subscriptions, support customers, meet legal obligations, and improve the website.

Depending on the situation, processing is based on a contract, legal obligation, legitimate interest, or consent. Patient information is processed on behalf of the healthcare provider under the data processing agreement; the provider is responsible for its own legal basis.

Audio and temporary processing data in MediVox are retained for up to 24 hours. Retention of generated text follows the selected service, user actions, and the agreement with the organization.

Account, contract, and accounting information is retained as needed for the customer relationship and legal obligations. Other information is deleted or anonymized when its purpose is fulfilled.

We use suppliers for cloud infrastructure, login, payment, communications, and consent-based website analytics. They are bound by agreements and may process information only for agreed purposes.

Storage regions, subprocessors, and any transfer mechanisms for patient information are governed by the data processing agreement. When information is transferred outside the EEA, we use a valid transfer mechanism and appropriate safeguards.

Essential cookies support sessions, security, and basic functionality. Analytics cookies are activated only after consent. You can reset your choice by clearing the site’s stored consent in your browser and revisiting the page.

We use technical and organizational measures including encrypted transmission and storage, access control, logging, limited retention, and security follow-up. No solution can guarantee completely risk-free processing.

When the conditions are met, you may request access, rectification, erasure, restriction, data portability, or object to processing. You may withdraw consent at any time.

For patient information, you should normally contact the healthcare provider acting as data controller. For information controlled by MediVox, contact post@medivox.ai.

You may complain to the Norwegian Data Protection Authority if you believe processing violates data protection law. We may update this notice when the service or law changes; the date above identifies the latest version.