Privacy Policy
PATIENTREACTION PRIVACY POLICY
Effective Date: 4/09/2026
SECTION 1 — SCOPE, AUTHORITY, AND LIMITATION
This Privacy Policy (“Policy”) governs the collection, use, processing, storage, disclosure, transfer, and handling of information by PatientReaction in connection with your access to and use of the Platform.
This Policy applies to all users, visitors, and individuals who access, browse, register for, or otherwise interact with the Platform, as well as all content, communications, and data generated, submitted, or made available through such use.
This Policy is incorporated into and operates in conjunction with the Terms of Use, Transparency Policy, Governance Framework, and Community Guidelines, which collectively form the PatientReaction legal structure.
This Policy does not create independent rights, obligations, or remedies. In the event of any conflict or inconsistency, the Terms of Use shall control to the fullest extent permitted by law.
Nothing in this Policy shall be construed to create any enforceable rights, guarantees, or expectations regarding privacy, data security, or data handling practices beyond those expressly required by applicable law.
PatientReaction operates exclusively within the United States and is governed solely by applicable federal and state laws of the United States, including the laws of the State of New York.
The Platform is not intended for use outside the United States.
SECTION 2 — PLATFORM NATURE AND REGULATORY POSITION
PatientReaction operates as a neutral, passive technology platform for user-generated healthcare experiences and does not provide healthcare services.
- not a covered entity or business associate under HIPAA
- does not operate within a regulated healthcare environment
- does not create or maintain medical records
- does not collect, process, or store information in a clinical or healthcare capacity
- health-related information is voluntarily disclosed by users
- user disclosures exist outside healthcare regulatory protections
SECTION 3 — INFORMATION COLLECTED
PatientReaction may collect information in connection with your use of the Platform, including information you provide directly, information contained in user-generated content, and information collected automatically through interaction with the Platform.
Information You Provide
- name, email address, and login credentials
- profile details
- communications with other users
Health-Related Information
- symptoms, diagnoses, treatments, and outcomes
- personal healthcare experiences
- information may be sensitive and publicly accessible
Technical and Usage Information
- IP address
- device identifiers
- browser type and operating system
- timestamps and interaction patterns
Automated Collection Technologies
- cookies and tracking technologies
- session activity and browsing behavior
- automated interaction data
SECTION 4 — PUBLIC CONTENT AND DISCLOSURE RISK
Content submitted to the Platform may be publicly visible and accessible to other users and third parties.
- information may be copied, reproduced, redistributed, stored, or indexed
- PatientReaction does not control downstream use of content
- removal, deletion, or restriction cannot be guaranteed
- information may persist indefinitely
- users assume all disclosure-related risks
Risks may include identity exposure, reputational harm, and unauthorized use.
SECTION 5 — USE OF INFORMATION
- operate, maintain, and improve the Platform
- enable user interaction
- analyze usage and support functionality
- ensure system performance
- support analytics and personalization
- support advertising and fraud prevention
- comply with legal obligations
PatientReaction does not engage in medical profiling or clinical inference and does not guarantee the relevance, accuracy, or appropriateness of any content or advertising.
SECTION 6 — DATA SHARING AND DISCLOSURE
Service Providers
- infrastructure and hosting providers
- analytics and security services
- Platform operations support
Legal and Safety Purposes
- comply with legal obligations
- enforce agreements
- protect rights, property, or safety
Business Transfers
- mergers and acquisitions
- asset transfers
Once information is shared with third parties, PatientReaction does not control how such information is used, stored, or processed and disclaims responsibility for third-party actions.
SECTION 7 — COOKIES AND AUTOMATED DATA COLLECTION
- support Platform functionality and analytics
- collect browsing behavior and session activity
- support automated performance tracking
- third-party technologies may also operate on the Platform
PatientReaction does not control third-party technologies and disclaims responsibility for their data practices.
SECTION 8 — DATA SECURITY DISCLAIMER
- no system can be guaranteed fully secure
- data transmission and storage involve inherent risks
- unauthorized access, breaches, and technical failures may occur
- PatientReaction disclaims liability for unauthorized disclosure or loss
SECTION 9 — DATA RETENTION
PatientReaction retains information for as long as it determines necessary in its sole discretion to operate the Platform, comply with legal obligations, enforce agreements, and resolve disputes.
- information may persist in backups or archives
- distributed systems and third-party environments may retain data
- complete removal cannot be guaranteed
SECTION 10 — USER RIGHTS AND LIMITATIONS
- rights to access, correct, or delete information are limited and conditional
- rights are subject to applicable law and technical feasibility
- submission of a request does not create an obligation to act
- PatientReaction may deny, limit, or condition requests
- no absolute right to deletion or modification is created
SECTION 11 — DATA LOCATION AND TRANSFERS
- all data is processed within the United States
- PatientReaction does not represent compliance with GDPR or similar laws
- users acknowledge U.S. laws may differ from other jurisdictions
- users consent to those differences
SECTION 12 — CHILDREN’S PRIVACY
- Platform is not intended for individuals under 18
- PatientReaction does not verify user age
- prevention of underage use cannot be guaranteed
- removal of information related to minors may be incomplete
SECTION 13 — LIMITATION OF LIABILITY
- no liability for data collection, processing, storage, or disclosure
- all data-related risks are assumed solely by the user
SECTION 14 — VERSION CONTROL, MODIFICATIONS, AND ACCEPTANCE
- Policy is subject to version control and modification
- PatientReaction may modify or discontinue the Policy at any time
- modifications become effective immediately upon posting unless stated otherwise
- continued use constitutes acceptance of the current version
- electronic records of acceptance may be maintained
In the event of any dispute, the version recorded by PatientReaction as accepted by the user shall control.
SECTION 15 — INTERPRETATION AND LIMITATION PRINCIPLE
- all provisions shall be interpreted broadly to maximize limitation of liability and allocation of risk