Last updated 26 August 2026
Two different kinds of data pass through this service, and they are treated differently.
When someone fills in a form, that information belongs to the practice. We hold it on their behalf and act on their instructions. We do not sell it, mine it, use it to train anything, or use it for any purpose other than providing this service.
| Kept for | The retention period the practice sets — seven years by default |
|---|---|
| Where | Encrypted, in AWS, in the region the practice's account uses |
| Who sees it | People the practice grants access to. Every read is recorded |
| On request | Exported or destroyed at the practice's instruction |
For people who use the console: name, work email, and what they did. Sign-ins, changes, and reads of patient data are recorded and kept for six years, because being able to say who did what is a requirement rather than a preference.
One, for your session, when you are signed in. It is not shared and is not used to track anyone. Form pages set no cookies at all.
| AWS | Hosting, storage, encryption. Business associate agreement in place |
|---|---|
| Stripe | Payments. Receives a billing name and email. Never patient information |
We will tell customers before adding another that touches patient information.
If you are a patient, the practice that runs the form is who to ask — the information is theirs, and we will not disclose or delete it except on their instruction. Reach us at privacy@minnato.ai and we will point you in the right direction.