Documentation
Privacy
A public summary of how Senvaro handles consultation data, clinician inputs, and related privacy contacts.
Purpose of Collection
We collect consultation audio, transcriptions, and clinician inputs solely for generating clinical documentation and ensuring continuity of care.
Use of Personal Information
Personal information is used to transcribe, summarise, and deliver clinical notes to your practice systems. We do not use these recordings or transcriptions for marketing or secondary purposes.
Storage & Security
All data is stored in our Australian Microsoft Azure tenancy with encryption at rest and in transit. Access is limited to authorised clinicians and support staff.
Retention
Consultations are automatically deleted after 14 days of inactivity. All data including audio, transcription, and notes is permanently removed. Deletion records are kept for audit purposes without any patient content.
Patient Rights
Patients and authorised representatives may contact privacy@senvaro.com to request access to, correction of, or deletion of personal information. We may verify identity or authority and coordinate with the relevant healthcare provider before disclosing or changing health information. We respond within 30 calendar days in line with APP 12/13.
Collection Notice
- Consultation audio and metadata are collected to transcribe and prepare clinical notes.
- Only your treating clinicians and nominated practice staff can access these recordings.
- Audio and transcript content is processed by Azure Speech and Azure OpenAI resources configured for Australian Azure regions.
Service Providers
Microsoft Azure OpenAI
Clinical note generation from transcriptions
Location
Australia East
Retention
Prompts and outputs are not used to train foundation models; avoid Global/DataZone deployments for regulated workloads
Microsoft Azure Speech Service
Real-time audio transcription
Location
Australia East
Retention
Processed in the configured Speech resource region
Vercel
Frontend hosting, static asset delivery, Web Analytics, and Speed Insights
Location
Global CDN; functions configured for Sydney
Retention
Receives request metadata such as IP address, user agent, and URL path; client analytics strips query strings, hash fragments, and sensitive workflow route segments before send; clinical payloads are sent to the Azure API
Azure Application Insights
Operational browser telemetry when enabled
Location
Configured Azure Monitor resource
Retention
Automatic route/query and fetch/XHR URL collection is disabled in the frontend
Azure Blob Storage & PostgreSQL
Encrypted storage of audio, notes, audit logs
Location
Australia East / South East
Retention
Subject to Senvaro retention policy (14 days from last activity)
Stripe
Subscription billing
Location
Global (tokenised merchant data only)
Retention
Payment records per Stripe data retention policy