DeskGate, Inc. · Privacy

Privacy policy

How DeskGate, Inc. handles personal information on deskgate.app, rebuttalhealth.app and in Rebuttal Studio.

1. Who we are

2. Patient data in Rebuttal Studio

Patient information a practice or billing desk processes in Rebuttal Studio is processed on the customer's behalf. For US customers this is protected health information under the HIPAA Business Associate Agreement in the Master Terms; for Swiss practices the AVV 3.1 applies. Patient data is processed transiently on DeskGate's servers at Flow Swiss AG in Zurich, Switzerland, and on Google Cloud Vertex AI in the EU, and is not stored. Patients should direct requests about their information to their provider.

This policy covers everything else: website visits, inquiries, subscriptions and payment, license checks, the voice assistant and business contacts.

3. What we collect and why

3.1 Website visits

When you open a page, technical connection data is processed: IP address, time, requested address and browser details. We use it to deliver the website, limit abuse and fix errors. Our servers are hosted by Flow Swiss AG in Zurich. Fonts load from Google Fonts and some code libraries load from the content delivery networks cdnjs (Cloudflare) and jsDelivr, which receive your IP address.

We use no analytics or advertising trackers.

3.2 Inquiries

When you contact us by form, email or phone, we process what you provide, such as name, organization, email address, role and message, and for forms your IP address. We use it to answer you and to set up a trial or subscription. Form submissions are stored on our server and forwarded to us by email.

3.3 Subscription and payment

Subscriptions are purchased through Stripe. Stripe processes your payment card details; we do not receive them. We process the practice or organization name, email address, number of licenses, subscription status, and the time and IP address of your acceptance of the Master Terms. We email you the license key. Purpose: entering into and performing the contract, billing, and records of acceptance.

3.4 License checks in Rebuttal Studio

To keep one license on one active PC, our server stores the license key, a random device ID, a short device label (browser and operating system) and last-use times. Your browser stores the license key and the device ID.

3.5 Voice assistant and phone

The website offers a voice assistant. When you start it, your voice, the conversation text and, when the assistant reads it, the content of the page you have open are sent to and processed by ElevenLabs (USA). Phone calls are handled by Twilio (USA). We use what you tell us, such as contact details, to handle your request.

3.6 Business contacts and market research

To reach practices, hospitals, billing companies, partners and investors, we process publicly available business contact information such as name, role, organization and work contact details, including through research service providers. You can object at any time by emailing contact@deskgate.app.

4. Cookies and browser storage

We use no analytics or advertising cookies. A strictly necessary cookie is set only for personal access links. Your browser's local storage holds the Rebuttal Studio license key and device ID and the display state of the voice assistant. You can clear these in your browser settings.

5. Service providers

We share personal information only as needed for the purposes above, with these providers:

ProviderPurposeLocation
Flow Swiss AGServers and hostingSwitzerland
Google Cloud (Vertex AI)Reading scans and screen frames, AI control pass of draftsEU
Google (Google Fonts)FontsUSA
StripeSubscriptions and paymentIreland and USA
Email delivery providerLicense emails, forwarding inquiriesSwitzerland or USA, depending on the service
ElevenLabsVoice assistantUSA
TwilioTelephonyUSA
Cloudflare (cdnjs), jsDelivrDelivery of code librariesWorldwide
Research service providersMarket research on business contactsUSA

We do not sell personal information.

6. International transfers

DeskGate, Inc. is a US company, and some providers process data in other countries. For visitors and customers in Switzerland, transfers to countries with adequate protection, including the EU and EEA, rely on Art. 16(1) of the Swiss Federal Act on Data Protection (FADP); transfers to the USA go to recipients certified under the Swiss-U.S. Data Privacy Framework or rely on the EU standard contractual clauses with the Swiss adaptations recognized by the FDPIC (Art. 16(2)(d) FADP).

7. Retention

We keep personal information only as long as needed for its purpose or as required by law: connection data as long as operation and security require; inquiries until resolved or for the duration of the business relationship; contract and billing records for the statutory retention periods. We do not store patient data.

8. Security

All connections are encrypted with TLS. Patient data is processed only in memory and then discarded; there is no patient database. Access to our systems is limited to the people who need it. We make no automated decisions about individuals.

9. Your rights

You can ask what personal information we hold about you, have it corrected or deleted, object to its processing, and request a copy. Email contact@deskgate.app. We will not discriminate against you for exercising these rights. Visitors in Switzerland can also complain to the Federal Data Protection and Information Commissioner (FDPIC).

10. Changes

We update this policy when our processing changes. The version published here applies.