Privacy Policy

1. Information We Collect

We collect information necessary to provide and improve our Service. The types of information we collect include:

• Information You Provide Directly:
  • Account Information: When you register for an account, we collect your first name, last name, and email address. This is required to create your account, manage your subscription, and identify you for manual payment activation if applicable.
  • Communications: If you contact us for support at drvirtuel@drvirtuel.com, we will collect your email address and the content of your message.
• Information Collected Automatically:
  • Usage and Interaction Data: We automatically collect information about how you interact with the Service. This includes which clinical cases you access, features you use, pages you visit, and general usage patterns. We collect this data using third-party analytics services like Google Analytics and Microsoft Clarity, and may use PostHog in the future.
  • Device and Connection Information: We collect technical information about your device, such as your IP address, browser type, and operating system.
  • Session Recording and Heatmaps: We use tools like Microsoft Clarity to capture how you interact with our website. This may include recordings of mouse movements, clicks, and scrolls to help us improve user experience. Sensitive fields are masked.
• Information from Third Parties:
  • Payment Information: When you purchase a subscription, the transaction is processed by our Merchant of Record, Paddle. Paddle provides us with information related to your purchase (like subscription status and a customer identifier) so we can manage your account, but we do not receive or store your full payment card details.

2. How We Use Your Information

We use the information we collect to:

• Provide and Maintain the Service: To create your account, manage your subscription, and give you access to the clinical cases.
• Improve and Develop the Service: To analyze usage data and session recordings to understand user behavior, identify areas for improvement, and enhance the overall platform.
• Communicate With You: To send important administrative messages (e.g., subscription reminders, security updates) and respond to your support inquiries.
• Manage Subscriptions: To facilitate payment processing with Paddle and manage your subscription status.
• For Security and Legal Compliance: To prevent fraud, protect the security of our Service, and comply with legal obligations.

3. How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

• With Service Providers: We share information with third-party vendors who perform services on our behalf. These include:
  • Backend and Database: Supabase
  • Hosting: Vercel
  • Merchant of Record: Paddle (handles payment processing)
  • Analytics and Session Replay: Google Analytics, Microsoft Clarity, and potentially PostHog.
• For Legal Reasons: We may disclose your information if required by law or in response to valid requests by public authorities.
• Business Transfers: If DrVirtuel is involved in a merger or acquisition, your information may be transferred as part of that transaction.

4. Data Storage and Security

• Storage: Your information is stored and processed by our third-party service providers (Supabase, Vercel, Paddle, Google, Microsoft), which operate servers in various global locations, including the United States and Europe.
• Security: We implement reasonable technical and organizational measures, such as using HTTPS, to protect your personal information. However, no electronic transmission or storage system is 100% secure.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

• Account Information: We retain your account information (name, email, subscription status) as long as your account is active and for a reasonable period thereafter for legal and administrative purposes.
• Analytics Data: Data collected by our analytics providers is retained according to their respective data retention policies.

6. Cookies and Tracking Technologies

We use cookies and similar technologies for several purposes:

• Essential Cookies: These are necessary for the basic functioning of the Service, such as keeping you logged in (managed by Supabase).
• Analytics and Performance Cookies: We use services like Google Analytics and Microsoft Clarity which use cookies to collect usage data. This helps us understand how you use the Service so we can improve it. We will seek your consent for non-essential cookies where required by law.

7. Your Rights and Choices

Depending on your location, you may have rights regarding your personal information, including the right to access, correct, or delete your data. To exercise these rights, please contact us at drvirtuel@drvirtuel.com. We may need to verify your identity before responding.

8. Children's Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe your child has provided us with personal information, please contact us.

9. International Data Transfers

Your information may be transferred to and processed in countries outside of your own, where our third-party service providers operate. We rely on the data protection agreements with these providers to ensure adequate protection for transferred data.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Effective Date."

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at: drvirtuel@drvirtuel.com.