Privacy Policy

We collect information you provide directly to us and information generated through your use of the Service. This includes but is not limited to:

Account Information

• Name, email address, and password (securely hashed)
• Professional details: specialty, license details, practice name, years of experience, title and more
• Profile information such as bio, clinic address, profile and generated photos, credentials and more
• Platform handles you voluntarily add (e.g., LinkedIn, Instagram, Facebook or others)

Usage Information

• Content you create, edit, save, and download using the platform
• Feature usage patterns and interaction data (used to improve the Service)
• Log data including IP addresses, browser type, device information, and timestamps for security measures
• Content preferences including writing tone, topic focus, and platform selections

When you connect a social account, we also store the access token the platform issues us, along with that account or Page name and profile picture. Section 6 explains this in full, including how to delete it.

We use the information we collect to:

• Provide, maintain, and improve the ExpertMD Service
• Personalise AI-generated content to your specialty, tone preferences, and goals
• Process transactions and send related information, including purchase confirmations
• Send transactional and promotional communications (you may opt out)
• Monitor and analyse usage patterns to improve our platform and user experience
• Detect, investigate, and prevent fraudulent transactions and other illegal activities
• Comply with our legal obligations and enforce our Terms of Service

AI personalisation is based primarily on the preferences you set within your account.

Your data is stored on secure servers primarily hosted in Singapore, operated by Amazon Web Services (AWS) and Google Cloud (GCP). We implement industry-standard security measures including:

• AES-256 encryption for data at rest
• TLS 1.3 encryption for all data in transit
• Regular security audits
• Access controls limiting employee access to user data on a need-to-know basis

We retain your account data for as long as your account is active. If you request to delete your account, we will delete or anonymise your personal data within 30 days, except where retention is required by law.

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following limited circumstances:

• Service Providers: Trusted third-party vendors who assist us in operating the platform (e.g., cloud hosting, analytics, payment processing). These providers are contractually required to protect your data.
• Legal Requirements: When required by law, court order, or government authority, or to protect the rights, property, or safety of ExpertMD, our users, or the public.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, in which case the new entity will be bound by this Privacy Policy.

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data.
• Deletion: Request that we delete your personal data, subject to legal retention requirements.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing of your data for certain purposes, including marketing.
• Restriction: Request that we restrict processing of your data in certain circumstances.

To exercise any of these rights, contact us at hello@expertmd.co. We will respond within 30 days.

ExpertMD can publish to social accounts you connect, including Facebook Pages, Instagram, and LinkedIn. This section explains exactly what we store for those connections, how we use it, and how to delete it.

What we store when you connect an account

• An access token issued by the platform, stored encrypted and used only to publish content you have approved
• The permissions you granted
• The account or Page identifier(s), so you can confirm which destination you are posting to

How we use it

• We publish only posts for which you have selected and confirmed a destination. ExpertMD never publishes content without your confirmation. The ExpertMD feed is a required destination and is automatically included with every publication.
• We do not read your private messages or direct messages, and we do not collect personal data about your followers.
• We do not use platform data for advertising, profiling, or AI training, and we never sell it.

How to delete your social connection data

• Disconnect in the app: Open Settings, go to the Publishing tab, and select Disconnect on the channel you want to remove under Connected Channels. We delete the stored access token and any cached information for that connection.
• Remove ExpertMD from the platform: In your Facebook or Instagram settings, remove ExpertMD from your apps list. The platform notifies us and we delete the same data.
• Email us: Send a request with the subject "Data Deletion Request" to the address below. We verify your identity, delete your data, and confirm within 30 days.

To request deletion of any data described above, contact hello@expertmd.co. We respond within 30 days.

We use cookies and similar tracking technologies to improve your experience and analyse how the Service is used. These include:

• Essential cookies: Required for the Service to function, including authentication and session management.
• Analytics cookies: Help us understand how users interact with the platform. We use aggregated, anonymised data only.
• Preference cookies: Remember your settings and personalisation choices.

You can control cookies through your browser settings. Disabling essential cookies may affect platform functionality.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out: