Your data, your rights

Privacy Center

Brazilian and U.S. privacy laws give you rights over your personal information. This center explains each one and the shortest way to use it with CHIRON, without paperwork.

Updated on October 17, 2026

Know and access

Confirm that we process your information and get a copy of it.

LGPD art. 18, I–II · CCPA/CPRA · HIPAA through your clinic

Correct

Fix information that is incomplete, inaccurate or out of date.

LGPD art. 18, III · CPRA · HIPAA amendment

Delete

Ask us to delete, anonymize or block information we do not need to keep by law.

LGPD art. 18, IV and VI · CCPA/CPRA · WA, NV and CT health data laws

Portability

Take your information to another provider in a structured format.

LGPD art. 18, V · state privacy laws

Who we share with

Know which companies and authorities receive your information. We never sell it or use it for targeted advertising.

LGPD art. 18, VII · CCPA/CPRA

Withdraw consent and opt out

Withdraw consent at any time, for the future. We honor the Global Privacy Control signal.

LGPD art. 18, IX · CPRA · state laws

Human review

Ask a person to review a decision made only by automated means. At CHIRON, AI never decides alone: every clinical suggestion goes through the responsible clinician.

LGPD art. 20

Object and appeal

Object to processing that does not follow the law, and appeal our answer where your state provides it.

LGPD art. 18, §2 · VA, CO, CT and other states

How to use your rights

1
Write to our data protection officer
Send your request to https://www.chironmedi.com/contato and say which right you want to use. No reason is needed. An authorized agent can write for you.
2
We confirm it is you
To protect your own information, we check that the request comes from you or your legal representative before acting.
3
We answer on time
Within 15 days for access requests under the LGPD, and within the time your state's law allows in the United States (45 days in California). We always tell you where the request stands.

Patient: your clinic is responsible for your health information. In the app you can export your information, withdraw consents and see who accessed your record. In the United States, HIPAA requests go to your clinic, and we help them answer.

Data protection officer

Dedicated channel: https://www.chironmedi.com/contato. Responsible company: CHIRON Tecnologia Ltda..

Contact the data officer

Who does what

Clinic: controller and covered entity
Decides why and how patient information is used in your care.
CHIRON: processor and business associate
Processes information on the clinic's behalf, under contract, with security and an audit trail. Controller only of clinic account and billing information.
Authorities
In Brazil you can petition the ANPD (gov.br/anpd). In the United States you can contact your state attorney general, the California Privacy Protection Agency, or, for HIPAA, the HHS Office for Civil Rights.

How we protect it in practice

Each clinic isolated in the database by row-level security.
Two-factor authentication for clinic staff, checked by the database itself.
Audit trail of every access, visible to the patient in the app.
Direct identifiers reduced before any AI request, with zero data retention at the AI provider.
Encryption in transit and at rest.
Patient consent recorded and revocable in the app.

Data subject rights