Privacy Policy

Two kinds of information

Account information: names, work email, role, practice details and billing contacts for the people who use DARO. DARO is responsible for this information.

Patient information: records practices keep in DARO. DARO processes it on the practice's behalf under a Business Associate Agreement. The practice's Notice of Privacy Practices governs how it is used. Patients should direct requests about their records to their practice.

How information is used

To provide the service: scheduling, charting, Ambient note drafting, billing, messaging and support. To keep it secure: sign-in, audit logs, fraud and abuse prevention, error monitoring. To bill subscriptions. DARO does not sell personal information, does not use patient information for advertising, and does not use it to train general-purpose AI models.

Ambient audio

When a clinician starts Ambient, visit audio is transcribed to draft a note. Audio is processed for transcription and not kept as a recording unless the practice turns on audio retention. Draft text is stored with the visit until signed or discarded.

Sharing

Information is shared only with the vendors listed on the Subprocessors page, who handle it under contract to provide the service, and where required by law. Practices may send records to payers, labs, pharmacies and other providers as part of care.

Security and retention

Data is encrypted in transit and at rest, access is limited by role, and every chart access is logged. Retention is described on the Security page.

Your choices

Account holders can update their profile, export practice data, and close accounts. Patients can request access, amendment or an accounting of disclosures from their practice, which can export their complete electronic record from DARO. Privacy questions: privacy@daroclinical.com.

Cookies

DARO uses essential storage for sign-in and preferences only. It does not use advertising trackers inside the application.