Medical Data Privacy Policy - MiConvert

1. Local Processing and Zero Data Retention

Our medical tools are designed to maximize privacy by processing files directly within your browser utilizing WebAssembly (Wasm) and JavaScript. When processing happens locally:

• Your files never leave your device.
• No data is uploaded to our servers.
• We have absolutely zero access to your medical images, patient names, or any metadata contained within the files.

2. Server-Side Processing

In cases where an advanced conversion cannot be performed locally in the browser and requires server-side processing, the following strict policies apply:

• Temporary Storage Only: Files are uploaded securely via HTTPS, processed immediately, and permanently deleted from our servers right after the conversion is complete.
• No Backups: We do not keep backups or logs of your uploaded files.
• No Inspection: We do not inspect, analyze, or mine the content or metadata of your medical files.

3. HIPAA and GDPR Compliance

While we strive to ensure maximum privacy through zero-retention and local processing:

• Anonymization Recommended: We strongly recommend that users anonymize or de-identify medical files (removing patient names, birth dates, and other PHI) before using our tools, especially if server-side processing is involved.
• User Responsibility: You are solely responsible for ensuring that your use of our service complies with your local laws and regulations, including HIPAA (USA), GDPR (Europe), and other health data protection standards.
• We act solely as a temporary conduit for file processing and are not a Business Associate (under HIPAA) or a Data Processor for PHI, as we do not retain or have meaningful access to the data.

4. Analytics and Tracking

We use minimal analytics to understand how our tools are used (e.g., page views, conversion success rates) to improve our service. This data is fully anonymized and never includes any file contents, filenames, or medical metadata.

5. Contact Information