Privacy Policy

We collect two types of information:

• Patient information — such as name, date of birth, patient ID, and medical imaging studies (X-ray, CT, MRI, etc.) received from connected imaging devices. This information is provided by the clinic, not entered directly by patients.
• User account information — such as username, role, and login activity (last login time and device type) for staff members who access the system.

We do not collect any information through forms filled out by patients, and we do not use cookies or tracking tools for advertising purposes.

All information collected is used only for the following purposes:

• Displaying and managing radiology studies for authorized clinic staff.
• Allowing secure sharing of specific studies with referring doctors.
• Keeping a record of all actions taken within the system for security and accountability.
• Managing user access and ensuring only authorized personnel can view patient data.

We do not use patient or user data for advertising, analytics, or any commercial purpose.

We apply industry-standard security measures to protect all data stored in the system. Sensitive patient information is protected both in storage and during transmission. Access to the system requires authentication, and every action performed is logged for accountability. Security headers and encrypted connections are enforced at all times.

Only authorized personnel with a valid account and the appropriate role can access patient studies. Unauthorized access attempts are blocked automatically.

• Share links — Authorized users may generate a secure link to share a single study with an external doctor. The link can be set to expire after a chosen period and can be revoked at any time. Only the specific study is accessible through the link — no other data.
• Email — Share links may be sent by email directly from the system. No third-party email marketing services are used.
• WhatsApp — The system can open WhatsApp on your device with a pre-prepared message. The system itself does not send any data to WhatsApp or Meta on your behalf.
• No data sales — We never sell, rent, or share patient or user data with any third party for commercial purposes.

Patient studies and records are retained in accordance with the clinic's own policies and any applicable medical record-keeping regulations. System activity logs are kept indefinitely for security and accountability purposes. User accounts remain active until deactivated by an administrator.

If you wish to request deletion of your data, please contact the system administrator. Some records may be exempt from deletion where required by law.

Patients and users have the right to:

• Request access to personal data held about them.
• Request correction of any inaccurate information.
• Request deletion of their data, subject to legal retention requirements.
• Request a copy of their DICOM imaging files in standard format.

To exercise any of these rights, contact the system administrator using the details below.

For any privacy-related questions or requests, please contact the system administrator:

This policy may be updated from time to time to reflect changes in the system or applicable regulations. The effective date at the top of this page will always reflect the most recent version.

The owner of BRAVE PACS reserves the right to suspend or permanently discontinue the service, in whole or in part, at any time and for any reason, including circumstances beyond the owner's control such as technical, legal, or operational factors. In such cases, no claims or refund requests may be made by any registered or subscribed user, regardless of their subscription status or remaining service period. By using this system, all users acknowledge and accept this condition.