MediNex Privacy Policy

1. Information We Collect

When you register for an account on the MediNex community platform, we collect only the minimal information needed to maintain your public profile and authentic identity:

• Account credentials (username, email address, cryptographic password hash).
• Public profile information you choose to provide (full name, academic department, university affiliation, skills, biography).
• Community content (public discussion posts, comments, likes, and follow relationships).
• Technical telemetry (IP address, user agent, timestamps recorded exclusively in security audit logs for spam defense).

2. Separation of ShasthoSetu Health Record Exchange R&D

ShasthoSetu is an isolated interoperable digital health record research initiative. Its experimental HL7 FHIR schemas and data-exchange prototypes are developed outside the social community database. Social accounts and community tokens issued by MediNex grant zero privilege to clinical health records or medical data stores.

3. Authentication & Cookie Usage

MediNex uses secure, rotating JSON Web Tokens (JWT) and HttpOnly, Secure, SameSite cookies to maintain authenticated sessions. We do not use third-party behavioral advertising cookies or cross-site tracking beacons.

4. Account Deletion and Data Rights

Every community user retains the right to export their public contributions or permanently delete their account. Upon deletion, personal identifiers and credentials are permanently purged from the active relational database.

5. Contact Data Privacy Officer

If you have questions regarding our compliance practices, please reach out via our Contact Form or email us at privacy@medinex.health.