This Privacy Policy explains how LezDo TechMed Pvt Ltd handles personal information, medical records, claim information, insurance records, legal documents, and AI-assisted processing in the MediAxis Platform.
Records submitted to MediAxis are processed under the customer's instructions.
Privacy roles →Protected health information is processed under a completed Business Associate Agreement.
HIPAA terms →Customer Data is not sold or used for cross-context behavioral advertising.
Sale and sharing →This Privacy Policy explains how LezDo TechMed Pvt Ltd collects, uses, protects, discloses, retains, deletes, and assists with personal information in connection with MediAxis and the MediAxis Platform. It applies to business contacts, customer administrators, authorized users, trial users, support contacts, and individuals whose information is included in records submitted by a customer.
MediAxis is a business SaaS platform for medical-record and medical-legal workflows. Customers may use MediAxis to organize records in chronology order, index records, review medical files, prepare chronology summaries, identify issues, support claims analysis, and create draft outputs for professional review. Customer use is also governed by the applicable Terms and Conditions, Customer SaaS Agreement, Data Processing Agreement, Business Associate Agreement, and product or order documentation.
MediAxis is not a consumer health app, patient portal, emergency medical service, law-firm substitute, medical-diagnosis tool, claims adjudicator, or insurance underwriting system. Customers and authorized users remain responsible for deciding whether their use of MediAxis is appropriate for a particular matter, claimant, patient, insured person, applicant, provider, attorney, expert, or client.
LezDo TechMed Pvt Ltd may act in different privacy roles depending on the information and activity. For account administration, business-contact management, product security, service communications, support management, billing administration, compliance, and marketing choices, LezDo TechMed Pvt Ltd generally determines the purpose and means of processing and may act as a controller or business under applicable privacy laws.
For medical records, claimant files, insurance files, legal case materials, and other Customer Data submitted to MediAxis, LezDo TechMed Pvt Ltd generally processes the information under the customer's instructions. Depending on the law and customer relationship, LezDo TechMed Pvt Ltd may act as a processor, service provider, contractor, business associate, or similar contracted service provider.
Customer instructions control Customer Data processing. The customer is responsible for the legal basis, notices, authorizations, permissions, professional duties, privilege decisions, litigation holds, and disclosure instructions that apply to the records it submits to MediAxis.
This Privacy Policy does not replace a customer's privacy notice, HIPAA notice of privacy practices, client engagement terms, insurer notice, employer notice, patient authorization, medical-record release, protective order, court order, or claim-related disclosure obligation. If the customer must provide notice or obtain consent, authorization, client approval, patient approval, court permission, insurer permission, or provider permission, the customer must do so before submitting the records to MediAxis.
When a signed agreement, BAA, DPA, order form, or security schedule gives a customer stronger or more specific privacy rights for Customer Data, that signed document controls for that customer relationship to the extent it conflicts with this Privacy Policy.
MediAxis uses AI-assisted processing under controlled terms. AI may help extract facts, classify records, organize chronology, find references, summarize records, and prepare draft outputs. LezDo TechMed Pvt Ltd does not use Customer Data, prompts, source excerpts, extracted text, embeddings, workspace activity, or outputs to train third-party foundation models unless separately agreed in writing.
Individuals usually should contact the customer first. If a patient, claimant, insured person, policy applicant, employee, represented party, or other individual wants to exercise privacy rights over records submitted by a customer, the customer usually controls the file and is best placed to verify identity, authority, privilege, legal holds, disclosure rights, and any applicable matter restrictions.
Key defined terms. Customer means the organization or person that creates, accepts, orders, pays for, or uses a MediAxis account, trial, demo, pilot, subscription, or signed agreement. Customer Data means records, files, prompts, instructions, metadata, content, and other information submitted to MediAxis by or for a customer. Input means prompts, instructions, uploaded files, source records, excerpts, metadata, user context, and workflow materials provided to MediAxis. Output means summaries, chronologies, indexes, extracted facts, issue observations, reports, source references, recommendations, and other materials generated or made available through MediAxis.
The categories below describe the main types of personal information that may be processed through MediAxis. Not every category applies to every customer, user, matter, or account. The actual information depends on the customer's workflow, uploaded records, enabled features, support requests, and applicable agreement.
LezDo TechMed Pvt Ltd receives information directly from customers, authorized users, administrators, trial users, support requesters, business contacts, and people who communicate about MediAxis. Customer Data is usually uploaded or entered by a customer or authorized user, or received through a customer-approved transfer method or integration.
If a customer connects MediAxis to another approved system, LezDo TechMed Pvt Ltd may receive information from that system according to the customer's instructions and the applicable integration settings. The customer is responsible for ensuring that connected systems, exports, imports, and user permissions are appropriate for the relevant matter and records.
Customer Data may include protected health information, special-category health data, confidential legal information, privileged material, claimant information, insured-person information, policy-applicant information, patient information, employment or disability information, financial or billing information, and other sensitive information. MediAxis is designed to process this information only for authorized business and professional workflows.
Customers must not submit records that they are not authorized to process through MediAxis, including records restricted by court order, protective order, professional confidentiality obligation, patient restriction, insurer restriction, employment restriction, substance-use treatment law, genetic information restriction, or other special rule unless the customer has authority and the required contractual terms are in place.
For notice-at-collection purposes, LezDo TechMed Pvt Ltd may collect the categories described in this Privacy Policy from customers, authorized users, connected customer systems, public-page visitors, support requesters, business contacts, and approved service providers. The information is used for the business and service purposes described in this policy, including account administration, MediAxis operation, customer workflows, AI-assisted processing, security, support, compliance, legal obligations, analytics, and communications.
LezDo TechMed Pvt Ltd may disclose information to customers, authorized users, approved service providers, subprocessors, professional advisers, legal or regulatory recipients, and other recipients directed by the customer or required by law. LezDo TechMed Pvt Ltd does not sell Customer Data and does not share Customer Data, prompts, source excerpts, workspace activity, or outputs for cross-context behavioral advertising.
Retention follows the lifecycle described in Section 7, unless a signed agreement, BAA, DPA, legal hold, security requirement, or applicable law requires a different period.
LezDo TechMed Pvt Ltd uses personal information only for purposes that are reasonably connected to MediAxis, customer instructions, legal obligations, service security, account administration, and approved business communications. We do not use Customer Data to create unrelated data products, sell data, or build advertising profiles.
We use information to provide, configure, operate, secure, maintain, and support MediAxis; process uploaded records; organize records into chronology; index records; identify source references; prepare summaries, reports, and draft outputs; manage workspaces; authenticate users; apply administrator settings; and support exports requested by the customer.
MediAxis may preserve metadata, source references, extracted text, user edits, and workflow activity so the customer can understand where an output came from, review the output against source records, and maintain internal accountability.
MediAxis may use AI-assisted processing for extraction, classification, record grouping, chronology support, summarization, retrieval, source-reference support, issue spotting, reasoning assistance, review assistance, and draft-output generation. AI-assisted processing is part of the customer's workflow and does not replace professional judgment.
Customers and authorized users must review and verify outputs before using them in legal, medical, insurance, claims, expert-review, product-safety, business, or regulatory decisions. The AI Usage Policy / AI Terms provides additional rules for AI-assisted functionality.
We may use limited personal information to detect misuse, prevent unauthorized access, investigate suspected incidents, maintain logs, enforce applicable terms, respond to legal requests, document customer instructions, support audits, protect the rights and safety of customers and individuals, and comply with applicable law.
We may use account and business-contact information to send administrative notices, security notices, support messages, product updates, renewal communications, and legally required notices. Marketing emails may be sent where permitted by law and subject to available opt-out choices. Service, legal, security, and account communications may still be sent where necessary.
LezDo TechMed Pvt Ltd may use operational, diagnostic, aggregated, de-identified, or non-customer-identifying information to maintain, secure, troubleshoot, and improve MediAxis. LezDo TechMed Pvt Ltd does not re-identify de-identified Customer Data except where permitted for security testing, validation of de-identification controls, legal compliance, or as otherwise allowed by the governing agreement and applicable law, and does not use that information for advertising or unrelated data products.
Any use of Customer Data for model training, reusable benchmarking, external research, data licensing, public health analysis, product-safety data products, or other secondary use requires separate written approval and appropriate legal documentation. This Privacy Policy does not grant that approval.
The legal basis for processing depends on the information, the customer relationship, the location of the individual, and the role LezDo TechMed Pvt Ltd has for the activity. This section explains the principal regulated-data framework used for MediAxis.
Where HIPAA applies and Customer Data includes protected health information, LezDo TechMed Pvt Ltd will process that information under a completed Business Associate Agreement with the applicable enterprise customer or other authorized contracting party. The BAA will define permitted uses and disclosures, safeguards, reporting duties, downstream obligations, assistance obligations, and return or destruction requirements for that customer relationship.
This Privacy Policy is not a HIPAA notice of privacy practices. Customers that are covered entities, business associates, providers, attorneys, insurers, claim administrators, or other regulated parties remain responsible for their own HIPAA notices, authorizations, minimum-necessary decisions, disclosure accounting, access requests, amendments, restrictions, and other duties.
If Customer Data includes UK, EEA, or other regulated personal data, the applicable customer agreement or Data Processing Agreement will identify the controller, processor, subprocessor, transfer, security, and assistance obligations that apply where required. For special-category health data, the customer is responsible for identifying the lawful basis and special-category condition for submitting the records to MediAxis.
For LezDo-controlled business-contact, account, security, support, and service-administration information, lawful bases may include contract performance, legitimate interests, legal obligations, consent where required, and establishment, exercise, or defense of legal claims.
US state privacy, consumer health, breach-notification, insurance, employment, biometric, genetic-information, unfair-practices, and sector-specific rules may apply depending on the customer, individual, record type, state, and use case. For Customer Data, the customer remains responsible for determining the state-law duties that apply to its matter and instructions. Customers should treat substance-use treatment records, genetic information, minors' records, and other specially protected records as restricted records and submit them only with appropriate authority and required contractual terms.
For LezDo-controlled business-contact, public-page, account, support, marketing, and security data, LezDo TechMed Pvt Ltd will provide rights, notices, and opt-out paths where applicable law requires them.
LezDo TechMed Pvt Ltd does not use this Privacy Policy to sell Customer Data, disclose Customer Data to data brokers, or share Customer Data for cross-context behavioral advertising. Customer Data, prompts, source excerpts, workspace activity, and outputs are not used to build advertising profiles.
If a law defines a particular service-provider disclosure as a sale or sharing event despite the business purpose, LezDo TechMed Pvt Ltd will address the required notice, opt-out, contract, or restriction in the applicable customer documents or privacy notice.
LezDo TechMed Pvt Ltd discloses personal information only for business, service, legal, security, customer-directed, and compliance purposes described in this Privacy Policy or applicable agreements.
We may disclose information to approved service providers and subprocessors that help provide MediAxis, such as cloud infrastructure, AI processing, document processing, OCR or file conversion, security monitoring, logging, support, communications, analytics, payment, identity, and professional-service providers. The Subprocessor Disclosure is the primary place for vendor-specific subprocessor information.
Service providers and subprocessors must process information only for authorized purposes and under appropriate confidentiality, security, privacy, and data-protection commitments. Where a DPA, BAA, or customer agreement requires approval, notice, or objection rights, those documents govern.
We may disclose Customer Data according to customer instructions, authorized user actions, administrator settings, integrations, exports, support requests, signed agreements, or applicable law. Examples may include customer-requested downloads, chronology exports, medical-record indexes, source files, reports, matter packages, or outputs sent to a customer-approved destination.
Customers are responsible for deciding whether recipients, downloads, filings, expert-review materials, claim submissions, court submissions, insurer communications, medical-provider communications, or other disclosures are lawful, necessary, complete, and appropriate.
We may disclose information when reasonably necessary to comply with law, legal process, court order, regulator request, subpoena, professional obligation, security investigation, incident response, claims defense, enforcement of terms, protection of rights, prevention of harm, or similar legal purpose.
If LezDo TechMed Pvt Ltd is involved in a merger, financing, acquisition, reorganization, or sale of business assets, information may be disclosed as part of due diligence or transferred as part of the transaction, subject to appropriate confidentiality and privacy protections.
MediAxis communications, public pages, documentation, or support materials may include links to third-party sites, services, plug-ins, forms, app stores, professional resources, or customer-selected destinations. Those external services are controlled by their own providers and are not governed by this Privacy Policy unless LezDo TechMed Pvt Ltd expressly states otherwise.
Customers and users should review the privacy and security terms of any third-party service before connecting, uploading, exporting, downloading, or sharing Customer Data through that service. LezDo TechMed Pvt Ltd is not responsible for privacy practices of external services that it does not control.
MediAxis may process personal information from the United States, United Kingdom, European Economic Area, and other regions when customers submit those records or when processing is required to provide the MediAxis Platform. Personnel, customers, service providers, and subprocessors may operate from different countries, and certain support, security, AI processing, or service operations may involve cross-border processing.
Where UK GDPR, EU GDPR, or similar law requires a transfer mechanism, LezDo TechMed Pvt Ltd will use appropriate contractual, technical, and organizational safeguards as required by applicable law and the applicable Data Processing Agreement or customer agreement. The applicable agreement or signed schedule should identify the relevant standard contractual clauses, UK Addendum, International Data Transfer Agreement, transfer assessment, or other safeguard for the actual transfer.
LezDo TechMed Pvt Ltd retains personal information for as long as reasonably necessary for MediAxis, customer instructions, legal requirements, security, audit needs, dispute handling, backup cycles, and the applicable retention schedule. Customer-specific terms in a signed agreement, BAA, DPA, or order document may set different requirements for a particular customer.
The practical default lifecycle for Customer Data is active retention during the subscription and matter workflow, a post-termination export window where available under the agreement, active production deletion after the applicable export or verified deletion process, and backup aging on ordinary backup cycles. If no different period is stated in the applicable agreement, LezDo TechMed Pvt Ltd generally provides a thirty-day export window for available Customer Data and Outputs after termination, generally completes active production deletion within thirty days after the export window or verified deletion request, and allows ordinary backups to age out within approximately ninety days unless legal hold, incident response, BAA, DPA, security, or compliance needs require a different period. Security logs may be retained generally for twelve months or longer for incidents, legal holds, or compliance needs. Billing and contract records may be retained generally for seven years, then archived or retained only as legally required.
Customers must export needed source records, chronologies, indexes, summaries, reports, Outputs, and matter packages during the applicable subscription period or export window. Temporary export packages should be protected, access-limited, and time-limited. Available export formats, timing, limitations, administrator access, and post-termination procedures are addressed in the Data Export Policy and customer agreement.
Deletion may be delayed or limited for legal holds, disputes, security investigations, BAA or DPA obligations, backup aging, audit logs, billing records, compliance records, and other lawful retention needs. Residual retained data remains protected and limited to the purpose requiring retention.
Deletion, account termination, return or destruction of Customer Data, and deletion confirmation are addressed in the Data Deletion / Account Termination Policy, Business Associate Agreement, Data Processing Agreement, and signed customer documents where applicable.
LezDo TechMed Pvt Ltd maintains reasonable administrative, technical, and organizational safeguards designed to protect MediAxis and the information processed through it. Safeguards may include access controls, encryption, least-privilege procedures, administrator controls, logging, monitoring, secure infrastructure practices, vendor management, workforce confidentiality obligations, and incident-response procedures appropriate to the service scope.
Security is a shared responsibility. Customers are responsible for their own devices, networks, user provisioning, credential protection, permissions, secure uploads, secure downloads, exports, local storage, onward disclosures, matter files, and professional handling of records and outputs. The Security & Privacy Commitments and Acceptable Use Policy provide additional security and use rules.
Support personnel may access Customer Data only where needed to provide support, troubleshoot a customer-approved issue, investigate a security matter, comply with a legal obligation, or perform an authorized service activity. Support access is limited, logged where appropriate, and handled under confidentiality obligations.
LezDo TechMed Pvt Ltd will evaluate suspected security incidents under its incident-response procedures. Where a customer agreement, BAA, DPA, or law requires notice, cooperation, or assistance, LezDo TechMed Pvt Ltd will follow those requirements. Unless a signed agreement or law requires a different period, LezDo TechMed Pvt Ltd will provide notice of a confirmed Customer Data security incident without undue delay after confirmation and generally within seventy-two hours where legally and operationally practicable. Security incident and vulnerability communications must be sent to security@lezdotechmed.com unless a signed agreement provides a different channel.
LezDo TechMed Pvt Ltd may use cookies and similar technologies on public pages and platform interfaces for essential operations, preference management, security, analytics, and consent management. Analytics should be configured to support product and page improvement, not to profile Customer Data or logged-in medical-legal workspace activity for advertising.
The Cookie Policy and, where applicable, Cookie Consent Mechanism explain cookie categories, consent handling, and user choices. Where required by applicable law and technically supported for the relevant online activity, LezDo TechMed Pvt Ltd may recognize browser-based privacy signals, such as Global Privacy Control, for applicable opt-out choices. Marketing communications may be sent where permitted by law and can be opted out of through the provided unsubscribe or preference method. Operational, legal, security, and service communications may still be sent when needed for MediAxis or the customer relationship.
Depending on the applicable law and the relationship to the information, individuals may have rights to request access, correction, deletion, restriction, objection, portability, withdrawal of consent, opt-out of certain communications, opt-out of sale or sharing where applicable, appeal of a privacy decision, or complaint to a regulator.
Requests about account, business-contact, marketing, public-page, and other LezDo-controlled information may be sent to privacy@lezdotechmed.com. LezDo TechMed Pvt Ltd may need to verify identity, authority, and the scope of the request before responding. LezDo TechMed Pvt Ltd will respond within the timeframe required by applicable law and generally aims to respond within thirty days for verified requests, unless a longer statutory period applies.
For medical records, claim files, insurance files, court records, deposition materials, authorization forms, and other Customer Data submitted to MediAxis, the customer usually controls the record and the legal relationship. Individuals should normally contact the customer that controls the matter, claim, policy, provider relationship, legal file, employment file, disability file, life-insurance application, or medical-product matter.
LezDo TechMed Pvt Ltd may redirect a request to the customer, assist the customer under the applicable DPA or BAA, or respond directly where LezDo TechMed Pvt Ltd is legally required or is the controller for the relevant information. LezDo TechMed Pvt Ltd may not be able to decide whether disclosure is appropriate without the customer because the records may involve privilege, legal holds, court restrictions, insurer obligations, medical-record restrictions, or professional duties.
Privacy rights are subject to legal limits, identity verification, authority verification, professional confidentiality, attorney-client privilege, work-product protection, litigation holds, claims handling, insurance duties, medical-record restrictions, security exceptions, fraud prevention, legal defense, and other exceptions under applicable law.
MediAxis is not directed to children and is not intended for personal use by minors. Customers must not submit information about children unless they have authority to process it for an authorized professional workflow and required safeguards are in place.
MediAxis is not currently offered as a direct patient service, consumer health record, emergency health service, legal-advice service, or direct-to-consumer insurance tool. Patients, claimants, insured persons, applicants, employees, represented parties, and similar individuals whose records appear in MediAxis usually have a relationship with the customer rather than with LezDo TechMed Pvt Ltd.
LezDo TechMed Pvt Ltd may update this Privacy Policy for product, legal, security, operational, or compliance reasons. Updated versions will identify the revised version date or effective date. If a material change meaningfully reduces privacy protections or changes how personal information is used or disclosed, LezDo TechMed Pvt Ltd will provide notice through reasonable means where required by law, contract, or the nature of the change. Where required by law or contract, LezDo TechMed Pvt Ltd will obtain consent before applying the change.
Privacy and data-rights requests for LezDo-controlled information should be sent to privacy@lezdotechmed.com. Formal legal notices should be sent to legal@lezdotechmed.com unless the applicable agreement requires a different notice method. Security incident and vulnerability communications should be sent to security@lezdotechmed.com. Support requests should follow the Support Policy or customer support channel.
Physical notices and correspondence may be sent to LezDo TechMed Pvt Ltd, No.210, Level 2, Sonia Plaza, Junction Main Rd, State Bank Colony, Meyyanur, Salem, Tamil Nadu 636004, India.