LegalPrivacy
Your privacy and data security are fundamental to everything we do at RadPro AI.
RadPro AI, a trade name of Radiology Pro AI Corp., an Ontario corporation ("we," "our," or "us"), is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our radiology reporting assistant platform.
When you create an account, we collect your email address and a password, which we store only as a hash. If you sign in with Google, Google confirms your email address to us instead. If you subscribe, Stripe collects your name and billing details. We do not ask for your license number or your institution.
We collect information about how you interact with RadPro AI, including features used, processing times, and system performance metrics. If you use RadPro Hub, we also record which version and edition of the Hub your browser sees on your workstation, so we can tell whether updates reach you; nothing about the study open in your dictation system is recorded.
Each report you process is saved in your account: the text you paste or import, any findings you add, the result of each report step, and the identifier map. A report can contain personal health information. With identifier protection on (the default), identifiers that RadPro AI detects are replaced with placeholder codes before the text is processed, and the identifier map that puts them back is saved with the report. Detection is pattern based and can miss items, so you review each one. Every saved report, including that map, is encrypted at rest. Images you upload for text extraction are not saved; the text read from them is. Reports stay in your account until you delete them or delete your account.
This is optional. If you press the RadPro Hub key that sends your signed final report back to RadPro AI, its text is de-identified and stored, encrypted, with that report in your own account, so it can be compared with the AI draft (for example, how much of the draft you changed). It is not shared with anyone, and it is used only for evaluating the drafts in your own account. It is deleted with the report.
We store the report templates you upload or create, their earlier versions, and the house style rules you save in My Templates, all encrypted at rest. Templates and style rules you write or edit in My Templates are checked for patient identifiers before they are saved, and anything detected must be removed or marked as not an identifier first. Conversations with the template agent are not stored: they are kept only in the memory of the open page in your browser, the text is de-identified before it reaches the AI service, and only the changes you approve are saved. Your templates, their versions and your style rules are deleted when you delete your account. A template you submit to the shared library is reviewed by our team; if it is added, the library copy does not carry your name and stays in the library.
To provide and maintain our radiology reporting assistance service. Report text is used to produce your report, and for nothing else except as described under Signed Final Reports. We do not train AI models on your reports, and we do not use them for research or for our own purposes.
To send you service updates, security alerts, and support messages.
To understand how the product is used and where it can be better. Usage records hold counts, timings and costs, not report text.
RadPro AI's application servers and database run on Fly.io in Toronto, Canada. Your account, your saved reports, your templates and the audit log are stored there.
The AI steps (structuring, impressions, quality checks, templates, text extraction from images and the template agent) run on Amazon Web Services Bedrock in the United States, under the Business Associate Addendum we have with Amazon Web Services. With identifier protection on, the text sent there carries placeholders instead of the identifiers RadPro AI detected. Detection can miss items, identifier protection can be switched off, and an image you upload for text extraction is sent as it is, so text processed in the United States can still contain identifiers. Text in which our server finds identifiers is processed only on Amazon Web Services Bedrock.
These two optional features also run on Amazon Web Services in the United States (us-east-1), using Bedrock Web Search, which searches Amazon's own web index and cached pages rather than outside websites. We have not yet confirmed that Bedrock Web Search is covered by our Business Associate Addendum, so before either feature runs, our server scans the exact text that would be sent. If it finds any identifier, the feature does not run on that report. The instructions also tell the model to keep report details out of its search queries.
Text in which our server found no identifiers may be screened for prompt injection by Google Cloud Model Armor in Toronto. Text with identifiers is never sent to it.
The current list of companies that receive data from RadPro AI (our subprocessors), with what each receives, where, and under what agreement, is available on request at admin@radpro.ai. Customers with a signed agreement with us (a Data Processing Agreement, Business Associate Agreement or PHIPA agent agreement) are told of a new subprocessor before it starts processing personal information.
The site and its API are served over HTTPS only. Every saved report is encrypted at rest with AES-256-GCM under a key held as a server secret, separate from the database. Passwords are stored only as argon2id hashes.
Two-step sign-in with an authenticator app is checked on our server for each sign-in session, and is required for administrator accounts and paid plans before reports can be opened or processed. Each sign-in ends after a period of inactivity (24 hours, or a shorter limit you choose).
Sign-ins, report actions and administrator actions are recorded in an audit log whose entries are linked by hashes, so a later change can be detected.
Identifier detection runs in your browser and again on our server. It is an aid to your review, not a guarantee: it can miss an identifier or flag a word that is not one.
Under Ontario's Personal Health Information Protection Act (PHIPA), RadPro AI, a trade name of Radiology Pro AI Corp., acts as an agent and electronic service provider of the health information custodian, only where the custodian has authorized use of RadPro AI. The custodian is the hospital or community health services centre operator for which you report, or, in private practice, the radiologist or radiology group, who gives that authorization by accepting our Terms of Service. We use personal health information only to provide the service to the custodian, as the custodian permits, and never for our own purposes. A PHIPA agent agreement is available on request.
If you report for a hospital, your hospital is the custodian. Get your hospital's approval before you use RadPro AI with patient information, and do not enter its patients' information until you have it.
Patients make requests to see or correct their personal health information to the custodian, not to RadPro AI. If a patient contacts us, we refer them to the custodian, and we help the custodian answer the request.
If personal health information we handle for a custodian is stolen, lost, or used or disclosed without authority, we notify the custodian at the first reasonable opportunity, so the custodian can meet its own notice obligations to patients and the Information and Privacy Commissioner of Ontario.
We protect Protected Health Information (PHI) with the safeguards described on this page and on our Security page. With identifier protection on, identifiers we detect are replaced with placeholder codes before AI processing; detection can miss items.
We NEVER sell, rent, or share your Protected Health Information with third parties for marketing or any non-healthcare purposes. Your PHI is used solely to provide our radiology reporting services.
We keep audit logs and compliance records for at least 6 years, the period HIPAA sets for compliance documentation. Reports stay in your account until you delete them or delete your account.
If a breach involves PHI we handle for a covered entity under a Business Associate Agreement, we notify the covered entity as that agreement sets out, and never later than the 60 days after discovery that HIPAA allows, and help it notify the people affected.
We sign a Business Associate Agreement (BAA) with a HIPAA covered entity on request, on the Enterprise plan or by separate agreement. Our Data Processing Agreement is not a BAA by itself.
We only access the minimum necessary information required to provide our services, following HIPAA's minimum necessary standard.
We follow the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation for Canadian users. For personal health information in Ontario, see the PHIPA section above.
The Privacy Officer of Radiology Pro AI Corp. is accountable for our compliance with PIPEDA and PHIPA. Contact RadPro AI at admin@radpro.ai.
We collect personal information only with your consent and for identified purposes. We limit collection to what is necessary for those purposes.
Where we are responsible for personal information ourselves, such as your account details, we report a breach of security safeguards that creates a real risk of significant harm to the Office of the Privacy Commissioner of Canada, and notify the people affected, as soon as feasible.
Canadian users have the right to access their personal information, challenge its accuracy, and file complaints with the Office of the Privacy Commissioner of Canada.
Your saved data is stored in Canada, and the AI steps run in the United States, as described under Where Your Data Is Stored and Processed. While information is processed in the United States, it may be accessed by courts, law enforcement and national security authorities there under United States law. We protect it by contract with our service providers.
You have control over your personal information
Request a copy of the personal information we hold about you as an account holder within 30 days. Patients: see Patient Access and Correction above.
Correct your account details, or ask us to. You can edit your reports in the app.
Delete reports yourself, or delete your account on the Account page. Audit log entries are kept, subject to 6-year HIPAA retention requirements.
Download each report as a text file from My Reports. For a copy of all your account data, email admin@radpro.ai.
Reports and templates are not deleted automatically today. They stay in your account until you delete them, or until you delete your account on the Account page, which removes your reports, templates, settings and sign-in details at once. Our records retention policy allows reports more than 6 years old to be removed; we will update this page before any automatic removal starts. Audit log entries and usage records (counts, timings and costs, no report text) are kept after an account is deleted. Audit logs and compliance documentation are kept for at least 6 years. Deleted data can remain in encrypted database backups until those backups are deleted; not every backup is yet deleted on a fixed schedule. Backups are used only to recover the service from a failure, and deleted data restored from a backup is deleted again.
We use third-party services for hosting, AI processing, payments, email, sign-in with Google and website analytics. The current list of these subprocessors, with what each receives and where, is available on request at admin@radpro.ai.
We use essential cookies to maintain your session and preferences. We do not use tracking cookies for advertising purposes. Website analytics run only on our public pages, without cookies, and count visits in aggregate. See our Cookie Policy.
When you create an account, we record how you found us: the campaign tags in the link you followed (for example which search ad), the website that referred you, and the page you first landed on. Your browser keeps this in local storage until you sign in. We use it only to see which of our marketing works. We do not store ad click identifiers, and we do not share this information with advertising networks or place their tracking pixels on our site.
RadPro AI is intended for use by radiologists, and by radiology residents and fellows under a radiologist's supervision. It is not directed to children under 18. We do not knowingly collect personal information from children.
Saved data is stored in Canada. The AI steps run in the United States, and some of our other service providers (payments, email, analytics) operate outside Canada. The current list of our subprocessors and their locations is available on request. For users in the European Economic Area, the United Kingdom and Switzerland, our GDPR page describes the safeguards for these transfers.
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. For material changes, we will provide additional notice via email.
If you have questions or concerns about this Privacy Policy or our data practices, please contact us: