Privacy policy

What we collect, why, who we share it with, and the choices you have — for visitors to our website and users of our product.

Effective October 1, 2026 · Draft 0.9

Template — pending counsel review. This page is a working draft and is not yet a binding agreement. Signed customer agreements control.

The short version

We collect what we need to run Margent and nothing more. We don't sell personal information, and we don't use it for advertising.
Clinical information (PHI) is governed by your organization's Business Associate Agreement with us, not by this policy. Your organization decides how it's used; we follow its instructions.
Live audio isn't stored by Margent, and uploaded audio expires within 24 hours. Before any customer uses real client information, your organization will set a window after which transcripts are deleted. We don't use what you give us to train AI models.
Our website uses only essential cookies and privacy-friendly, cookieless analytics. No ad trackers.
You can ask to see, correct or delete your personal information at any time by emailing privacy@getmargent.com.

Who this policy covers

This policy describes how Margent Health, Inc. ("Margent", "we") handles personal information about visitors to getmargent.com, prospective customers who contact us, and users of our product (clinicians, administrators and other staff of our customers).

When our customers use Margent to document care, the information about their clients is protected health information (PHI). For PHI, we act as a business associate under HIPAA (and, where applicable, a qualified service organization under 42 CFR Part 2). We use and disclose PHI only as our agreement with the customer permits. If you're a client of one of our customers, please contact your provider about your records — they control them, and we'll help them respond.

Information we collect

Category	Examples	Source
Account information	Name, work email, credentials, role, organization, program	You or your organization's admin
Usage information	Features used, settings, device and browser type, error logs (with PHI removed)	Automatically, from the product
Customer content	Session audio and transcripts, notes, plans, measures and other clinical records	Your organization, under its BAA
Contact and sales	Name, email, phone, organization, message	Forms on our website
Website analytics	Pages visited, referrer, approximate region (aggregate, cookieless)	Automatically

How we use it

To provide, secure and support the product, including delivering notes to your EHR.
To communicate with you about your account, product changes and, if you opt in, our monthly newsletter.
To understand which features are used so we can improve them — using usage information, never the content of clinical records.
To meet legal obligations, enforce our terms and protect our users.

We share information only with subprocessors that help us run Margent — cloud hosting, speech recognition, AI model providers, email and support tools — each under a contract at least as protective as ours and, for PHI, a BAA. Our current list is published at /legal/subprocessors, and customers can subscribe to change notices. We may also disclose information when required by law, and we will notify the affected customer unless legally prohibited.

Retention

Audio: deleted once transcribed.
Transcripts: before any customer uses real client information, your organization sets a window (24 hours to 90 days) after which they are deleted. Server-side deletion on that window is built but isn't live yet.
Notes and records: kept according to your organization's settings and our agreement; deleted within 30 days after the agreement ends unless the customer asks us to return them first.
Account and usage data: kept while your account is active and for up to 24 months after, for security and legal purposes.

Security

We store data in the United States and encrypt it in transit (TLS) and at rest (AES-256). Our security page shows where each safeguard stands today, including the ones not in place yet.

Your choices and rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, and to object to or limit certain uses. Email privacy@getmargent.com and we'll respond within 30 days. We won't discriminate against you for exercising these rights. Requests about PHI will be routed to the healthcare organization that controls it.