Privacy Policy – iMagic Consult
Last Updated: June 2026
Introduction
iMagic Consult is a Chrome Extension designed to assist authorized healthcare professionals in managing consultation workflows, templates, and clinical documentation within approved healthcare systems.
This Privacy Policy explains what information is processed, how it is used, stored, and protected.
Information We Process
The extension may process the following categories of information:
Account Information
- User email address
- Authentication credentials used for authorized access
- Session identifiers
- Access tokens and refresh tokens
Configuration Data
- User preferences
- Template settings
- Selector configurations
- Personalization settings
- Extension settings stored locally in the browser
Clinical Workflow Data
Depending on user actions and authorized access within the healthcare platform, the extension may read or temporarily process clinical workflow data displayed on the relevant healthcare system page, including:
- Patient identification information
- Medical record numbers
- Demographic information
- Consultation notes
- Diagnoses
- Vital signs
- Laboratory information
- Treatment information
The extension processes this information solely to provide its intended workflow and documentation assistance functionality.
How Information Is Used
Information is used to:
- Authenticate authorized internal users
- Maintain active user sessions
- Load and manage consultation templates
- Populate clinical documentation fields within authorized systems
- Improve workflow efficiency for authorized healthcare professionals
- Store extension preferences and configuration locally
- Deliver the intended functionality of the extension
Storage of Information
Information may be stored in the following ways:
- Account and authentication-related information may be processed through secure authentication infrastructure used to control authorized access.
- Extension preferences, templates, selectors, and configuration data may be stored locally within Chrome Extension storage.
- Clinical workflow data and patient-related data remain local to the user’s browser session and the authorized healthcare system. The extension does not upload such clinical data to Supabase or to any other external server operated by the extension.
Data retention depends on operational requirements, browser storage behavior, and applicable healthcare system policies.
Data Sharing
We do not sell user data, clinical data, or patient-related data.
iMagic Consult does not share patient clinical data with Supabase, analytics providers, advertising networks, or other third-party services.
Information may be shared only in limited circumstances, such as:
- Authentication-related processing necessary to verify authorized internal users.
- The authorized healthcare system where the healthcare professional is already logged in and permitted to access the relevant data.
- Legal authorities when required by applicable law.
Security
We implement reasonable technical and organizational safeguards including:
- Restricted access for authorized internal users only
- Authenticated access controls
- Session management
- Secure transmission using HTTPS where network communication is required
- Local browser-based processing for clinical workflow data
- Limited use of external services only where necessary for authentication or extension operation
No method of transmission or storage is completely secure, and absolute security cannot be guaranteed.
User Access and Availability
iMagic Consult is not available for unrestricted public use. The extension is intended for selected internal users, members of an authorized healthcare-related community, or healthcare professionals who have been granted access.
There is no public self-service registration form within the extension. User access is managed internally.
User Rights
Users may request:
- Access to their account-related information
- Correction of inaccurate account or configuration information
- Deletion of locally stored extension configuration where applicable
- Revocation of access where permitted by internal policy
Requests may be submitted through the contact information below. Requests involving patient records may also be subject to the policies of the relevant healthcare system or institution.
Third-Party Services
The extension may use limited third-party infrastructure services for authentication or authorized extension operation, including:
- Supabase Authentication
- Supabase-related services for account/session management where applicable
Patient clinical data is not uploaded to Supabase by the extension. Third-party services are governed by their own privacy and security policies.
Contact Information
Developer: iMagic Consult
Email: MSA Mail
Changes to This Policy
We may update this Privacy Policy periodically. Updates will be published on this page with a revised effective date.