Last Updated: June 17, 2026
This Privacy Policy explains how VOCALLI.AI, a product of DigiMedix Technology Solutions Inc. (“the Company”, “we”, “our”, or “us”), collects, uses, stores, and protects information when you use our AI-powered medical scribe software-as-a-service (“the Platform”).
We are committed to maintaining the highest standards of security and confidentiality in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA), provincial healthcare privacy laws (including PHIPA, HIA, and others), and the Health Insurance Portability and Accountability Act (HIPAA) where applicable.
The Platform is intended exclusively for licensed healthcare professionals and healthcare organizations.
It is the user’s sole responsibility to obtain all necessary patient consents and authorizations required under applicable privacy and healthcare laws before submitting any patient data or Protected Health Information (PHI) to the Platform.
The Company is not responsible for verifying or maintaining patient consent records and assumes no liability for user or client non-compliance.
The Platform is intended for professional healthcare use and is not directed toward children under the age of 18.
We do not knowingly collect personal information directly from children. If we become aware that information has been collected from a child in violation of applicable law, we will take reasonable steps to delete such information.
When users register for an account, enable Multi-Factor Authentication (MFA), or access security-related features, we may collect and process mobile phone numbers for identity verification and account security purposes.
Phone numbers are used solely to provide authentication services, deliver one-time passwords (OTPs), security alerts, and other service-related communications required for the operation of the Platform.
We use cookies, web beacons, and similar tracking technologies to ensure proper Platform functionality, remember user preferences, improve performance, and analyze website traffic.
Users may manage cookie preferences through browser settings.
Such data is processed and stored securely according to the user’s selected jurisdiction (Canada or USA).
We understand the critical sensitivity of healthcare data.
We do not use Protected Health Information (PHI), patient information, audio recordings, transcripts, or clinical notes submitted through the Platform to train foundational AI models.
Submitted information is processed solely for generating documentation and providing services requested by authorized users.
At registration, users select their preferred jurisdiction.
Clinical and transcription data are stored within Canadian data centres and processed through HIPAA- and PIPEDA-compliant service providers operating in Canada
Clinical and transcription data may be stored and processed within the United States using HIPAA-compliant service providers.
Certain account information, including practitioner names, email addresses, phone numbers, and encrypted payment information, may be processed by secure third-party providers operating in the United States.
Information processed outside Canada may become subject to the laws of those jurisdictions.
For additional information regarding data storage practices, contact: privacyofficer@digimedix.net
We use collected information solely for:
We do not sell, rent, or trade personal information, phone numbers, or health data.
To deliver these messages, we may use trusted third-party communication providers, including Twilio Inc.
Phone numbers collected for authentication purposes are used solely for security and account access functions.
We do not use phone numbers for marketing or promotional SMS campaigns without separate explicit consent.
By providing a phone number and using the Platform, users consent to receive authentication and security-related SMS communications.
Message and data rates may apply.
We work with selected third-party providers supporting
Where applicable, providers are required to maintain HIPAA-compliant Business Associate Agreements (BAAs), Data Processing Agreements (DPAs), and appropriate security controls.
In the event of a security incident involving Personal Information or PHI, we will provide notifications as required under applicable privacy and healthcare regulations.
Information is retained only for as long as necessary to provide services, satisfy legal obligations, and support legitimate business operations.
Clients may request deletion of data by contacting our Privacy Officer.
Backup and archival data are securely removed according to retention schedules and legal requirements.
Requests may be submitted to our Privacy Officer.
We may update this Privacy Policy periodically to reflect legal, technical, operational, or regulatory changes.
Updated versions will be published with a revised “Last Updated” date.
Continued use of the Platform constitutes acceptance of any revised Privacy Policy.
DigiMedix Technology Solutions Inc.
Email: privacyofficer@digimedix.net
Phone: 800-756-1525
Vocalli.ai operated by DigiMedix Technology Solutions Inc.
Vocalli.ai operated by DigiMedix Technology Solutions Inc. | Copyright © 2025 All Rights Reserved
