Privacy Policy
Last updated: November 6, 2026
MedMalPal is built to help law firms evaluate potential medical malpractice cases. We understand that the records entrusted to us often contain highly sensitive medical information. Protecting that information is fundamental to the way MedMalPal is designed and operated.
This Privacy Policy explains what information we collect and how it is used.
Security & Confidentiality
Medical records require more than encryption — they require responsible stewardship.
Confidentiality is a design principle, not an afterthought.
MedMalPal is designed to help law firms evaluate potential medical malpractice cases while protecting confidential medical information through secure transmission, controlled access, and disciplined data handling practices.
Key Principles
- Medical records are processed only to prepare the requested Merit Review and to answer your follow-up questions about the case.
- Your original uploaded files are deleted shortly after processing.
- So you can ask follow-up questions about a case, we keep an encrypted copy of it — the extracted record text, the merit review, and your questions and answers. It is retained for a limited window — 3 days by default, extendable up to 90 days if you choose to keep a case open — then automatically and permanently deleted.
- Retained case content is encrypted at rest (AES-256) and is accessible only to your firm; even our administrators cannot read your case content.
- No AI is trained on your firm’s or your clients’ information.
- MedMalPal does not sell your or your clients’ information.
- MedMalPal is designed to minimize the collection, retention, and exposure of confidential medical information.
Information We Collect
We collect only the information reasonably necessary to prepare the requested Merit Review.
This may include
- Account information needed to manage your account.
- Medical records you upload for review.
- Limited technical information needed to operate the platform.
- Website usage information from our public pages, as described under Website Analytics below.
Information is used only to
- Prepare the requested Merit Review.
- Operate the platform.
- Understand and improve our public website.
Website Analytics
On our public website pages, we use a third-party analytics provider to understand how visitors find and use the site.
- It records the pages you view, the links and buttons you click, the website or campaign that referred you, your browser and device type, and an approximate location derived from your IP address.
- It may store an anonymous identifier in your browser (a cookie or local storage) to recognize return visits.
- Analytics never runs inside the MedMalPal application, including sign-in, and never has access to uploaded records, Merit Reviews, or any case content.
- We do not record your screen or keystrokes, and we do not sell this information.
AI Processing
Artificial intelligence is used only to prepare the requested Merit Review.
- Uploaded information is processed only for the requested Merit Review.
- No AI is trained on your firm’s or your clients’ information.
- Your original uploaded files are deleted shortly after processing; the encrypted case copy that powers follow-up questions is retained only for the limited window described above, then permanently deleted.
Changes to This Privacy Policy
As MedMalPal evolves, this Privacy Policy may be updated to reflect changes to the Service or applicable legal requirements.
Material changes will be reflected on this page.
Contact
Questions regarding privacy or this Privacy Policy may be directed to: