Legal
Privacy Policy
This Privacy Policy explains how DocSearch Health Solutions LLC collects, uses, shares, and protects your personal information when you use our platform and services.
- Effective Date: April 1, 2026
- Last Updated: May 5, 2026
- DocSearch Health Solutions LLC
Your Privacy Matters to Us
We built DocSearch to make healthcare more accessible. We collect only the information we need to operate our platform and connect you with care. We do not sell your personal information. We do not use your health data for advertising. This policy tells you exactly what we do and don't do.
1
Overview
DocSearch Health Solutions LLC (“DocSearch,” “we,” “us,” or “our”) operates docsearch.com, a dual-purpose healthcare platform offering (1) telehealth treatment programs and (2) a free physician search directory. This Privacy Policy applies to all users of the Platform, including visitors, registered account holders, and patients.
This Privacy Policy describes:
- What personal information we collect and why
- How we use and share that information
- How our telehealth partner TelegraMD fits into the picture
- How long we keep your data
- Your rights and choices regarding your informatio
This Privacy Policy works alongside our Terms of Use and our HIPAA Notice of Privacy Practices. For health information specifically — Protected Health Information (PHI) under HIPAA — please refer to our HIPAA Notice, which governs your medical data in more detail.
Two Types of InformationDocSearch handles two distinct categories of information: (1)
Personal Information— general data like your name, email, and payment details — governed by this Privacy Policy; and (2)
Protected Health Information (PHI)— your medical and health data — governed by our HIPAA Notice of Privacy Practices and federal law. Both are treated with care. PHI gets additional protections.
2
Information We Collect
2.1 Information You Provide Directly
| Category | Examples | When Collected |
|---|---|---|
| Identity Information | First name, last name, date of birth, gender | Account registration, eligibility funnel |
| Contact Information | Email address, phone number, mailing address | Account registration, payment checkout |
| Health & Eligibility Information | Approximate age, treatment interest, symptom selections, eligibility responses | Treatment eligibility funnel (pre-handoff to TelegraMD) |
| Payment Information | Credit/debit card details, billing address | Treatment program checkout (processed by third-party payment processor) |
| Account Credentials | Username, password (hashed), security preferences | Account creation |
| Communications | Messages, support tickets, feedback, survey responses | When you contact us or respond to communications |
| Doctor Search Queries | Specialty searches, location inputs, filter preferences | When using the free Physician Search tool |
2.2 Information Collected Automatically
| Category | Examples | Purpose |
|---|---|---|
| Device & Technical Data | IP address, browser type, operating system, device type, screen resolution | Security, fraud prevention, platform optimization |
| Usage Data | Pages visited, features used, time spent, click patterns, scroll depth | Platform improvement, analytics |
| Log Data | Access logs, error logs, timestamps of actions | Security, debugging, compliance |
| Location Data | Approximate location derived from IP address; precise location if you grant permission | Geographic availability, physician search results |
| Cookie & Tracking Data | Session identifiers, preference cookies, analytics identifiers | See Section 7 — Cookies & Tracking |
2.3 Information from Third Parties
- TelegraMD (Telehealth Partner): We may receive limited confirmation data from TelegraMD regarding your treatment program status (e.g., whether a prescription was issued) for billing reconciliation and support purposes. We do not receive your full medical records from TelegraMD except through our authorized dashboard access as described in Section 6.
- Payment Processors: Our payment processors (e.g., Stripe) may provide us with transaction confirmations, partial card numbers, and fraud signals.
- Analytics Providers: We receive aggregated and anonymized analytics data about how users interact with our Platform.
- Publicly Available Sources: For the Physician Search directory, we may incorporate publicly available professional and licensing information about healthcare providers.
3
How We Collect Your Information
We collect information through the following means:
- Directly from you — when you create an account, complete our eligibility funnel, make a payment, use the doctor search, or contact our support team
- Automatically — through cookies, web beacons, pixels, log files, and similar tracking technologies as you navigate our Platform
- From our partners — limited data from TelegraMD, payment processors, and analytics providers as described in Section 2.3
- From your devices — technical information sent automatically by your browser or device when you access our Platform
Note About Our Eligibility Funnel
Our treatment eligibility funnel asks basic questions (approximate age, symptom selections, treatment interest) before you are redirected to TelegraMD for full clinical intake. This funnel data — even though it precedes formal medical treatment — may constitute Protected Health Information when combined with your identity. We treat all funnel data with HIPAA-level protections from the moment you select a treatment category.
4
How We Use Your Information
4.1 To Provide and Operate the Platform
- Creating and managing your account
- Processing your treatment program enrollment and payments
- Routing you to TelegraMD for clinical evaluation and prescription services
- Providing access to the free Physician Search directory
- Delivering customer and technical support
- Communicating with you about your account, orders, and treatment status
4.2 To Improve and Develop the Platform
- Analyzing usage patterns to improve features and user experience
- Conducting internal research and analytics on aggregated, de-identified data
- Testing new features and optimizing platform performance
- Identifying and fixing technical issues and bugs
4.3 For Safety, Security, and Legal Compliance
- Detecting and preventing fraud, abuse, and unauthorized access
- Verifying user identity and eligibility
- Complying with applicable laws, regulations, and legal obligations
- Enforcing our Terms of Use and other agreements
- Responding to legal requests, court orders, and government inquiries
- Protecting the rights, property, and safety of DocSearch, our users, and the public
4.4 For Communications and Marketing
- Sending transactional emails (receipts, order confirmations, prescription status updates)
- Sending service-related notifications (account alerts, policy updates)
- Sending marketing communications about DocSearch services — only with your consent or where permitted by law
- Personalizing your experience based on your treatment interests and search history
Opt-Out of Marketing AnytimeYou can unsubscribe from marketing emails at any time by clicking “Unsubscribe” in any marketing email or contacting us at info@docsearch.com . Opting out of marketing will not affect transactional or service-related communications necessary for your account.
4.5 Legal Bases for Processing (where applicable)
Where required by law (such as under GDPR for users in the European Economic Area), we process your personal information based on one or more of the following legal bases: performance of a contract with you; our legitimate business interests; compliance with a legal obligation; or your consent.
5
How We Share Your Information
We do not sell your personal information. We share your information only as described in this section.
| Recipient | What We Share | Why |
|---|---|---|
| TelegraMD (Telehealth Partner) | Name, contact info, treatment selection, payment confirmation, eligibility funnel data | To facilitate your clinical intake, physician evaluation, and prescription services. See Section 6. |
| Licensed Pharmacies | Name, shipping address, prescription details (via TelegraMD) | To dispense and ship your prescribed medications |
| Payment Processors | Payment card details, billing address, transaction data | To process payments for treatment programs. We do not store full card numbers. |
| Cloud Infrastructure Providers | All data we store, subject to BAAs where PHI is involved | To host and operate our platform securely |
| Analytics Providers | De-identified or aggregated usage data; IP address with appropriate safeguards | To understand how our platform is used and improve it |
| Email & Communication Providers | Name, email address, communication content | To send transactional and marketing communications |
| Customer Support Tools | Name, contact info, support ticket content | To manage and respond to support requests |
| Legal & Compliance | Any data required by applicable law | To comply with court orders, subpoenas, regulatory requirements, or law enforcement requests |
| Business Transfers | All data held at the time of the transaction | In connection with a merger, acquisition, or sale of all or substantially all of our assets. We will notify you before your data is transferred and becomes subject to a different privacy policy. |
| With Your Consent | Any data you specifically authorize us to share | For any purpose you explicitly agree to |
We Never Do This
DocSearch does not sell your personal information or protected health information to data brokers, advertisers, or any third party for their commercial benefit. We do not permit third-party advertisers to use your health data for targeting. We do not share your medical information with your employer, insurer, or family members without your explicit written authorization.
6
TelegraMD & Our Telehealth Partnership
6.1 How the Handoff Works
- You complete DocSearch’s eligibility funnel and payment on docsearch.com
- Upon qualifying and completing payment, you are redirected to telegramd.com for full clinical intake
- On TelegraMD’s platform, a licensed physician conducts a comprehensive medical history intake and clinical evaluation
- TelegraMD’s physician — not DocSearch — makes all prescribing decisions
- If prescribed, your medication is dispensed by a licensed pharmacy and shipped to you
6.2 TelegraMD’s Privacy Practices Once you are redirected to telegramd.com, your interactions on that platform are governed by TelegraMD’s own Privacy Policy and HIPAA Notice of Privacy Practices, which are separate from this document. We encourage you to review TelegraMD’s privacy documentation at telegramd.com before submitting your medical history. 6.3 DocSearch’s Dashboard Access DocSearch has access to a dashboard provided by TelegraMD that contains information about patients who enrolled through our platform. This access is governed by a HIPAA Business Associate Agreement (BAA) between DocSearch and TelegraMD. Our use of information accessed through this dashboard is strictly limited to:
- Patient support and account management
- Billing reconciliation and payment processing
- Quality assurance and compliance monitoring
- Responding to patient inquiries about their treatment status
We apply the HIPAA minimum necessary standard to all dashboard access — employees access only the patient information needed for their specific function. All dashboard access is logged and monitored.
Two Privacy Policies Apply to You
If you enroll in a Treatment Program, your information is subject to both this Privacy Policy (for your DocSearch account and eligibility data) and TelegraMD’s Privacy Policy (for your clinical intake and medical records). Both companies are independently responsible for the data they hold about you.
7
Cookies & Tracking Technologies
We use cookies and similar tracking technologies to operate our Platform, remember your preferences, and understand how our Platform is used.
7.1 Types of Cookies We Use
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Required for the Platform to function — session management, authentication, security, payment processing. Cannot be disabled. | Session / up to 1 year |
| Functional | Remember your preferences, language settings, and personalization choices | Up to 1 year |
| Analytics | Understand how users navigate the Platform using tools like Google Analytics; data is aggregated and anonymized where possible | Up to 2 years |
| Marketing / Advertising | Track whether you came from a specific ad or referral source; used to measure campaign effectiveness. We do not use health data for ad targeting. | Up to 90 days |
7.2 Managing Cookies
You can control cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. Note that disabling certain cookies may affect Platform functionality.
For analytics opt-out, you can install the Google Analytics Opt-out Browser Add-on.
For advertising cookies, you can opt out through the Network Advertising Initiative or Digital Advertising Alliance opt-out tools.
7.3 Do Not Track
Some browsers include a “Do Not Track” (DNT) feature. Our Platform does not currently respond to DNT signals because there is no industry-standard interpretation of how to respond. We will update this policy if that changes.
8
Data Retention
We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account information | Duration of account + 3 years after closure | Business records, dispute resolution |
| Eligibility funnel data (health-related) | 6 years from date of collection | HIPAA minimum retention requirement for health records |
| Payment & billing records | 7 years | Tax and financial record requirements |
| Support communications | 3 years from resolution | Quality assurance, dispute resolution |
| Analytics & usage data | Up to 2 years (aggregated/anonymized) | Platform improvement |
| Marketing preferences & consent records | Until you opt out + 3 years | Proof of consent |
| Security logs & access records | 1–3 years | Security monitoring, incident response |
| PHI accessed via TelegraMD dashboard | Per our BAA with TelegraMD and HIPAA requirements | Compliance with HIPAA retention obligations |
When we no longer need your personal information, we will securely delete or anonymize it. Where anonymization is not possible, we will securely store your information and isolate it from any further processing until deletion is possible.
9
Data Security
We implement reasonable and appropriate technical, administrative, and physical safeguards to protect your personal information from unauthorized access, disclosure, alteration, and destruction. Our security measures include:
- Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher (HTTPS)
- Encryption at rest: Sensitive data including health information is encrypted at rest using AES-256 or equivalent standards
- Access controls: Role-based access controls limit who can access your data to employees with a legitimate need
- Multi-factor authentication: Required for all internal systems accessing personal or health data
- Regular security assessments: We conduct periodic vulnerability assessments and penetration testing
- Employee training: All employees with data access receive security and privacy training
- Vendor management: All third-party vendors with access to personal data are contractually required to maintain appropriate security standards
No Guarantee of Absolute Security
Despite our best efforts, no security system is impenetrable. No method of transmitting data over the internet or storing data electronically is completely secure. If you believe your account has been compromised, please contact us immediately at info@docsearch.com.
10
Your Privacy Rights
Depending on your location and applicable law, you may have the following rights regarding your personal information. To exercise any of these rights, contact us at info@docsearch.com.
Right to Know & Access
Request a copy of the personal information we hold about you and information about how we use it.
Right to Correct
Request correction of inaccurate or incomplete personal information in our records.
Right to Delete
Request deletion of your personal information, subject to legal retention obligations and ongoing treatment relationships.
Right to Opt Out
Opt out of marketing communications, certain data sharing, or the sale of personal information (we don't sell, but the right exists).
Right to Portability
Receive your personal information in a structured, machine-readable format where technically feasible.
Right to Restrict Processing
Ask us to limit how we use your personal information in certain circumstances.
How to Submit a Request: Email us at info@docsearch.com with the subject line “Privacy Rights Request” and describe what you’re requesting. We will respond within 30 days. For health-related (PHI) requests, see our HIPAA Notice for applicable timelines and procedures.
We may need to verify your identity before processing your request. We will not discriminate against you for exercising your privacy rights.
11
California Residents — CCPA/CPRA Rights
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).
11.1 Categories of Personal Information We Collect
In the past 12 months, we have collected the following categories of personal information from California residents: identifiers (name, email, IP address); personal records (payment information, health eligibility data); internet or network activity (browsing history on our Platform, search queries); geolocation data (approximate location); and inferences drawn from the above.
11.2 Your California Rights
- Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected, used, disclosed, or sold about you
- Right to Delete: Request deletion of your personal information, subject to certain exceptions
- Right to Correct: Request correction of inaccurate personal information
- Right to Opt Out of Sale or Sharing: We do not sell personal information. We do not share personal information for cross-context behavioral advertising.
- Right to Limit Use of Sensitive Personal Information: We use sensitive personal information (including health data) only to provide the services you requested
- Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights
11.3 Shine the Light
California Civil Code Section 1798.83 permits California residents to request information about our disclosure of personal information to third parties for their direct marketing purposes. We do not share personal information with third parties for their own direct marketing purposes.
11.4 How to Submit a California Rights Request
Email info@docsearch.com with the subject line “California Privacy Request.” We will respond within 45 days (extendable by an additional 45 days with notice). You may submit requests on behalf of yourself or, with proper authorization, on behalf of another California resident.
Note: PHI collected in connection with healthcare treatment is generally exempt from the CCPA. For health data, see our HIPAA Notice of Privacy Practices.
12
Children's Privacy
Our Platform may contain links to third-party websites, services, and applications, including TelegraMD’s platform at telegramd.com, pharmacy portals, and healthcare provider websites accessible through our Physician Search.
This Privacy Policy does not apply to those third-party services. We are not responsible for the privacy practices of any third-party website or service. We encourage you to read the privacy policy of every website you visit and every service you use that collects your personal information.
The inclusion of a link on our Platform does not constitute an endorsement of the linked website or service.
13
Third-Party Links & Services
Our Platform is intended for adults aged 18 and older. We do not knowingly collect personal information from individuals under the age of 18. Our telehealth treatment programs are available only to adults, and our physician search directory is designed for adult patients and caregivers.
If we discover that we have inadvertently collected personal information from a person under 18, we will delete that information promptly. If you believe we may have collected information from a minor, please contact us immediately at info@docsearch.com .
14
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:
- Update the “Last Updated” date at the top of this page
- Post the revised policy on our website at docsearch.com/privacy
- For material changes, notify registered users by email at least 14 days before the changes take effect
Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. If you do not agree to the updated policy, you should stop using the Platform and close your account.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
15
Use of artificial intelligence (AI) tools
DocSearch offers two AI-powered informational tools on docsearch.com:
- AI Skin Analysis — provides general educational information about skin appearance based on a user-submitted photo.
- SmartConsult™ Plastic Surgery Visualization — provides illustrative visualizations of potential cosmetic procedure outcomes based on a user-submitted photo.
Both tools are educational and informational utilities only. They do not diagnose medical conditions, do not prescribe treatment, do not provide medical advice, and do not establish a physician-patient relationship.
WHAT AI ENGINE WE USE
DocSearch’s AI tools are powered by Anthropic’s Claude foundation model, accessed through the Anthropic Commercial Application Programming Interface (API).
WHAT INFORMATION THE AI TOOLS COLLECT
When you use one of DocSearch’s AI tools, the following information is processed:
- The image you upload to the tool
- Any text you enter into the tool’s interface
- Basic technical information (browser type, IP address, timestamp) used solely to operate the service
The AI tools do not require you to create an account, do not require you to log in, and do not link AI tool inputs to any DocSearch user profile.
HOW YOUR INFORMATION IS HANDLED
DocSearch has architected the AI tools so that no protected health information (PHI) is created or stored on docsearch.com infrastructure:
- Images you submit are processed in real time and are not retained or stored by DocSearch
- The AI-generated analysis is returned to you on-screen only
- DocSearch does not store the analysis or link it to your account
- Any copies you make of your results (e.g., saving or printing) leave DocSearch’s custody and become your own records
When DocSearch transmits your image to Anthropic’s API for processing, the following safeguards apply by default under Anthropic’s Commercial Terms of Service:
- Anthropic does not use API inputs or outputs to train, fine-tune, or improve its AI models
- API logs are retained by Anthropic for a maximum of 30 days, after which they are automatically deleted
- Anthropic’s commercial API is governed by its Commercial Terms of Service and Privacy Policy, available at anthropic.com/legal
HOW YOUR INFORMATION IS NOT USED
DocSearch does not:
- Sell your AI tool inputs or outputs to any third party
- Use your AI tool inputs to train any AI model
- Share your AI tool inputs with affiliates, marketing partners, or advertisers
- Link your AI tool inputs to any other personal information you may have provided to DocSearch
- Retain your AI tool inputs after the analysis is returned
REQUESTING A PHYSICIAN CONSULTATION
If, after using an AI tool, you elect to request a physician consultation through DocSearch, only the following information is transmitted to the consulting physician:
- Your name, email address, phone number, and geographic area
The image you submitted, the AI-generated analysis, and any specific condition information you may have entered into the tool are NOT transmitted to the physician.
Any clinical evaluation begins fresh between you and the physician at the time of consultation.
YOUR RIGHTS RELATED TO AI USE
You have the right to:
- Choose not to use the AI tools at any time
- Decline to provide an image or any other information
- Stop using a tool at any point during the analysis
- Request information about how DocSearch uses AI by contacting privacy@docsearch.com or your designated contact
- Receive responses to inquiries about AI use within a reasonable time period
LIMITATIONS OF AI
The AI tools provided by DocSearch are subject to the inherent limitations of artificial intelligence:
- AI-generated outputs may contain errors, inaccuracies, or omissions
- Skin appearance and cosmetic visualization results are illustrative only and not predictive of medical outcomes
- AI is not a substitute for examination by a licensed physician
- Use of AI tools does not guarantee any particular result, diagnosis, or treatment outcome
If you are concerned about a medical condition, please consult a licensed physician. The AI tools are not designed to be used for medical decision-making.
CHANGES TO THIS POLICY
DocSearch may update this AI section from time to time. The “Last updated” date at the top of this section reflects the most recent revision. Material changes will be communicated through a notice on docsearch.com.
16
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
Privacy Officer
DocSearch Health Solutions LLC
Attn: Privacy Officer
8135 NOBT
Orlando, FL 32811
Email: info@docsearch.com
Phone: +1 (407) 974-6808
Hours: Mon–Fri, 9am–6pm ET
Related Legal Documents
HIPAA Notice of Privacy Practices — Governs your protected health information
Submit a Privacy Request — Exercise your privacy rights
HHS OCR Complaint Portal — File a HIPAA complaint with the federal government
Effective Date: April 1, 2026 · Last Updated: April 1, 2026 · © 2026 DocSearch Health Solutions LLC. All rights reserved.