Sub Processor List

Last updated: November 11, 2020

This Sub-Processor List describes which third-parties are used by Doxy.me Services as related to the collection, use and disclosure of Your information.

Definitions

Regardless of how you are using this website or the Doxy.me Service, this section defines certain terms that are used throughout this policy.

For the purposes of this Sub-Processor List:

  • You means the individual accessing or using the Doxy.me Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable. You must be at least 18 years of age in order to use the Service.
  • Company (referred to as either “the Company”, “We”, “Us” or “Our” in this Agreement) refers to Doxy.me Inc., 3445 Winton Pl, Suite 114, Rochester, NY 14623.
  • Affiliate means an entity that controls, is controlled by or is under common control with a party, where “control” means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.
  • Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analyzing how the Service is used.
  • Third-party Social Media Service refers to any website or any social network website through which a User can log in or create an account to use the Service.
  • Personal Data is any information that relates to an identified or identifiable individual.
  • Cookies are small files that are placed on Your computer, mobile device or any other device by a website, containing (among other things) the details of Your browsing history and/or connection information when using the Service.
  • Device means any device that can access the Service such as a computer, a cellphone or a digital tablet.
  • Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
  • User is someone accessing the Website as a guest, a Provider, or a Patient.
  • Protected Health Information (PHI) means any health-related information as defined by applicable law.

Terms specific to the Doxy.me Service are:

  • Service refers to the software product accessible from the Website.
  • Provider means a doctor, medical group, or other healthcare professional who has signed up as a “Provider” on the Doxy.me Service.
  • Patient refers to an individual who is using the “Patient” component of the Service using a unique URL sent by the Provider to view the Waiting Room (prior to the Session). 
  • Account means a unique account created for You to access our Service or parts of our Service. This may also be referred to as Your Clinic.
  • Website refers to doxy.me, accessible from https://doxy.me
  • Session is secure audio and/or video communication between the Patient and the Provider—the key feature of the Doxy.me Service.
  • Waiting Room is the web page that is seen by Patients prior to the beginning of a video session. The Provider may change the look and feel of the Waiting Room and upload Provider-specific content.
  • Provider Link is the unique URL (web address) that the Patient uses to enter the Provider’s Waiting Room prior to a Session. An example is https://yourclinic.doxy.me/DrSmith

Usage Data

Usage Data is collected automatically when accessing the Service and visiting this Website.

Usage Data may include information such as Your Device’s Internet Protocol address, browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile internet browser You use, unique device identifiers and other diagnostic data.

We may also collect information that Your browser sends whenever You visit our Service or when You access the Service by or through a mobile device.

Our Service may contain links to other websites that are not operated by Us. If You click on a third-party link, You will be directed to that third party’s site. We strongly advise You to review the Privacy Policy of every site You visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.

Payment Processing

Payment processing services enable doxy.me to process payments by credit card, bank transfer or by other means. To ensure greater security, doxy.me shares only the information necessary to execute the transaction with the financial intermediaries handling the transaction.
Some of these services may also enable the sending of timed messages to the User, such as emails containing invoices or notifications concerning the payment.

Stripe (Stripe Inc)

Stripe is a payment service provided by Stripe Inc.

Personal Data processed: various types of Data as specified in the privacy policy of the service.

Place of processing: United States – Privacy Policy.

Hosting and Backend Infrastructure

This type of service has the purpose of hosting Data and files that enable doxy.me to run and be distributed as well as to provide a ready-made infrastructure to run specific features or parts of doxy.me. Some of these services work through geographically distributed servers, making it difficult to determine the actual location where the Personal Data are stored.

Amazon Web Services (AWS) (Amazon Web Services, Inc.)

Amazon Web Services (AWS) is a hosting and backend service provided by Amazon Web Services, Inc.

Personal Data processed: various types of data collected and generated by the Service.

Place of processing: United States – Privacy Policy. Privacy Shield participant.

Healthcare Blocks Cloud

Healthcare Blocks provides a buffer between healthcare delivery organizations and IaaS cloud service providers, improving operational efficiency and streamlining compliance. It may be considered a Virtual Private Cloud that allows automatic configurations to meet HIPAA and NIST cybersecurity requirements.

Personal Data processed: various types of Data as specified in the privacy policy of the service.

Place of processing: Where data are located in AWS.

Analytics

The services contained in this section enable the Owner to monitor and analyze web traffic and can be used to keep track of User behavior.

Google Analytics (Google LLC)

Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google utilizes the Data collected to track and examine the use of the Doxy.me Service, to prepare reports on its activities and share them with other Google services.

Google may use the data collected to contextualize and personalize the ads of its own advertising network.

Personal Data processed: Cookies; Usage Data.

Place of processing: United States – Privacy Policy – Opt Out.

Google Analytics (Google LLC) for Firebase

Google Analytics for Firebase or Firebase Analytics is an analytics service provided by Google LLC.
In order to understand Google’s use of Data, consult Google’s partner policy.

Firebase Analytics may share Data with other tools provided by Firebase, such as Crash Reporting, Authentication, Remote Config or Notifications. The User may check this privacy policy to find a detailed explanation about the other tools used by the Owner.

Doxy.me uses identifiers for mobile devices and technologies similar to cookies to run the Firebase Analytics service.

Users may opt-out of certain Firebase features through applicable device settings, such as the device advertising settings for mobile phones or by following the instructions in other Firebase related sections of this privacy policy, if available.

Personal Data processed: Cookies; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example); usage data.

Place of processing: United States – Privacy Policy. Privacy Shield participant.

Analytics collected directly (Doxy.me)

Doxy.me uses an internal analytics system that does not involve third parties.

Personal Data processed: Cookies; Usage Data.

Personal Data processed: internet information.

Mixpanel

Mixpanel is an analytics service provided by Mixpanel, Inc.

General usage: A/B Testing, Audience Measurement, Mobile, Site Optimization.

Place of processing: United States – Privacy Policy – Opt Out.

Personal Data processed: Internet information.

Facebook Ads conversion tracking (Facebook pixel) (Facebook, Inc.)

Facebook Ads conversion tracking (Facebook pixel) is an analytics service provided by Facebook, Inc. that connects data from the Facebook advertising network with actions performed on Doxy.me. The Facebook pixel tracks conversions that can be attributed to ads on Facebook, Instagram and Audience Network.

Personal Data processed: Cookies; Usage Data.

Place of processing: United States – Privacy Policy. Privacy Shield participant.

Category of personal data collected: internet information.

This processing constitutes a sale based on the definition under the CCPA. In addition to the information in this clause, the User can find information regarding how to opt out of the sale in the section detailing the rights of Californian consumers in our main Privacy Policy (https://doxy.me/en/privacy-policy).

Google Ads conversion tracking (Google LLC)

Google Ads conversion tracking is an analytics service provided by Google LLC that connects data from the Google Ads advertising network with actions performed on Doxy.me.

Personal Data processed: Cookies; Usage Data.

Place of processing: United States – Privacy Policy. Privacy Shield participant.

Category of personal data collected: internet information.

This processing constitutes a sale based on the definition under the CCPA. In addition to the information in this clause, the User can find information regarding how to opt out of the sale in the section detailing the rights of Californian consumers in our main Privacy Policy (https://doxy.me/en/privacy-policy).

Google Analytics with anonymized IP (Google LLC)

Google Analytics is a web analysis service provided by Google LLC (“Google”). Google utilizes the Data collected to track and examine the use of doxy.me, to prepare reports on its activities and share them with other Google services.

Google may use the Data collected to contextualize and personalize the ads of its own advertising network.

This integration of Google Analytics anonymizes your IP address. It works by shortening Users’ IP addresses within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the complete IP address be sent to a Google server and shortened within the US.

Personal Data processed: Cookies; Usage Data.

Place of processing: United States – Privacy Policy – Opt Out. Privacy Shield participant.

Category of personal data collected: Internet information.

This processing constitutes a sale based on the definition under the CCPA. In addition to the information in this clause, the User can find information regarding how to opt out of the sale in the section detailing the rights of Californian consumers in our main Privacy Policy (https://doxy.me/en/privacy-policy).

Hotjar

Hotjar is an analytics and heat mapping service used to display the areas of a page where users most frequently move the mouse or click. This shows where the points of interest are, and helps us to understand how providers navigate the site so we can improve Doxy.me
All data are collected anonymously, and you can opt-out at any time.

Personal Data processed: Cookies; Usage Data.

This processing constitutes a sale based on the definition under the CCPA. In addition to the information in this clause, the User can find information regarding how to opt out of the sale in the section detailing the rights of Californian consumers in our main Privacy Policy (https://doxy.me/en/privacy-policy).

Customer Experience

Intercom

Intercom is a hosted ticketing system.

General usage: Feedback forms and surveys, ticketing system. (https://intercom.com

Personal Data processed: Data provided by existing customers that may include name and email address.

SatisMeter

SatisMeter provides targeted feedback.

General usage: Customer feedback from new customers; measured satisfaction, gauge customer experience. (https://www.satismeter.com/)

Personal Data processed: Data provided by prospective or existing customers that may include name and email address.

ProfitWell

ProfitWell is a subscription reporting system.

General usage: Customer and payment reports. (https://profitwell.com

Personal Data processed: Data provided by existing customers that may include name and email address.

Mailchimp

Mailchimp is an all-in-one Marketing Platform for small business.

General usage: Outbound email, email tracking. (https://mailchimp.com

Personal Data processed: Data provided by prospective or existing customers that may include name and email address.

HubSpot

HubSpot offers hosted software for marketing, sales, and customer service.

General usage: Customer database. (https://hubspot.com

Personal Data processed: Existing and potential customers that may include name, email address, phone number, company name.

Vonage

Vonage provides a video API built on the WebRTC industry standard that is available on billions of devices. It is used by the doxy.me audio-video conference. The parent company is Nexmo, Inc.

General usage: Video API. 

Personal Data processed: None.

PubNub, Inc.

PubNub provides in-app messaging.

General usage: Chats within the Doxy.me Service. (https://pubnub.com

Personal Data processed: Name entered by Patient at beginning of Session and Provider name.

Median CRM, Inc.

PubNub provides real-time chat when a user is viewing the Doxy.me website.

General usage: Chats within the Doxy.me Service. (https://hellomedian.com)

Personal Data processed: Possible name or other information entered by website visitor.

Others

Adhere.ly

Adhere.ly provides reminders functionality within the doxy.me environment. It allows Patients to be notified about appointments, future check-ups, or other important events. Reminders are sent by email or text message. Personal Data are only used to provide the reminder service and then deleted. This feature is optional.

Personal Data processed: Patient name, Patient email address, Patient mobile number.

Place of processing: United States – Privacy Policy.

Changes to this Privacy Policy

We may update our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page.

We will let You know via email and/or a prominent notice on Our Service, prior to the change becoming effective, and We will update the “Last updated” date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, You can contact us:

By email: support@doxy.me

By phone:  +1 (844) 436-9963

angle-downangle-leftangle-rightangle-upcaret-downcheckcheckmarkclosecloseboldenvelopefacebookhamburgerhomeinstagramlinkedinpauseplaytwitteruser