ToxLumen Privacy Policy
Go to ToxLumen ProductLast updated on:September 2, 2026
1. Scope
Medical Toxicology LLC provides ToxLumen, a clinical toxicology platform for poison centers, clinical toxicology services and individual clinicians. This policy covers the ToxLumen web application, its clinical tools, its knowledge library and the ToxLumen Simulation training module. It does not cover the MedicalToxic website, the Medical Toxicology Community, or the MedicalToxic CMS. Each has its own privacy policy.
2. Two Kinds of Data
The distinction matters throughout this policy. Account and organization data is about you, our customer: your name, email address, role, the organization and workspaces you belong to, your seat, your plan, and your activity in the product. Case data is what you enter about a patient or an exposure while documenting a case. Where it identifies an individual it is protected health information. Your organization, not Medical Toxicology LLC, decides what is entered and why; we process it to provide the service and for nothing else.
3. What We Collect
Information you give us: • Account details: name, email address, role and organization membership. Authentication and profile management are handled by the central MedicalToxic account service. • Case inputs, in any of four modes: a typed narrative, an uploaded audio file, an audio recording made in the browser, or a Live Call transcribed as it happens. • Everything you enter or edit downstream of that input: structured facts, analysis, guidance, safety alerts and the final note. • Billing details, handled by our payment processor. We do not store full card numbers. • Anything you send us in support correspondence. Information the product generates: • Credit and usage records: which AI actions ran, when, by whom, and what they cost. • An append-only audit event for every meaningful clinical change to a case. • Live Call session metadata: status, timings, billable seconds, and the transcription model used. • Simulation training records: attempts, scores, debriefs and assignment history. Information collected automatically: • Standard technical logs: IP address, browser and device type, and timestamps, kept for security, abuse prevention and diagnostics.
4. Live Call
Live Call has its own section because people reasonably assume a call is recorded. It is not. • Audio is captured from your browser microphone and sent to our realtime transcription provider under a short-lived credential issued for that session. • Raw audio is never stored. The waveform on screen indicates active capture, not recording. Only the finalized transcript segments are kept, and they are encrypted at rest. • The transcript becomes an ordinary unreviewed case source. Everything after that is the normal workflow, with a clinician reviewing before anything is relied upon. • Users holding the Owner or Admin role in your organization can watch a live call in progress, read-only. This is a supervision feature, and your organization controls who holds those roles. • Live Call does not dial out, accept inbound telephone calls, or connect to a telephone network. It is an input mode in the browser. You are responsible for any consent or notification your jurisdiction requires before a consultation is transcribed. Recording and wiretap law varies by state and by country, and we cannot discharge that duty on your behalf.
5. How We Use This Information
• To provide the case workflow, the clinical tools and the knowledge library. • To process case data on your organization's instructions, and for no other purpose. • To meter credits and handle billing and top-ups. • To keep the service secure, prevent abuse, and maintain the audit trail. • To send you service and safety communications about the product. • To improve the product, using aggregated and de-identified information. We do not sell personal information. We do not use case data for advertising, and we do not use it to train AI models.
6. Artificial Intelligence and Its Limits
ToxLumen uses third-party large language models to draft structured facts, analysis, guidance and the note. Three commitments govern that use: • Deterministic calculations always override AI numeric output. Dose and level calculations come from rule engines, not from a model. • Unknown exposure is never guessed. Missing stays missing and uncertain stays uncertain; the product does not fill gaps to appear complete. • A clinician decides at every step. AI output is a draft for review, finalizing a case is a human act, and once finalized the case is locked — nothing regenerates over a signed record. Case content is sent to our AI sub-processor solely to return output to you, and is not used to train their models. ToxLumen is not a medical device and does not practise medicine. It supports a qualified clinician's documentation and reasoning; it does not diagnose, prescribe, or determine disposition.
8. Security
• Case source data is encrypted at rest, and all traffic is encrypted in transit. • Notifications and analytics carry no patient information. This is enforced in the system, not merely promised. • Access is role-based and scoped to organization and workspace. • Every meaningful clinical change writes an append-only audit event, so the record of who did what cannot be quietly rewritten. No system is perfectly secure. If a breach affects your data we will notify you without undue delay, and on the timetable set by any Business Associate Agreement in place between us.
9. How Long We Keep It
• Case data is retained for as long as your organization's account is active. ToxLumen does not automatically delete finalized clinical records, because a locked record is often exactly what a poison center is required to keep. Your organization sets its own clinical retention requirements. • Live Call transcripts follow the case they belong to. Raw audio is never retained at all. • Audit events are retained for the life of the account and are, by design, not editable. • Billing and usage records are retained for as long as tax and accounting law requires. • Simulation training records are retained for the life of the account, so that a training history remains exportable. On termination you may export your data. After a ninety-day wind-down window we delete or de-identify case data, except where retention is legally required or where it sits in immutable audit and backup media, which age out on their normal cycle.
10. Your Rights
Depending on where you are, you may have rights to access, correct, delete, port or restrict processing of personal data about you, and to complain to a supervisory authority. For case data we act on your organization's instructions. If you are a patient whose information is held in ToxLumen, please contact the poison center or clinician who treated you — they hold the relationship and the record, and we will support them in responding. For your own account data, use the contact form at medicaltoxic.com/contact-us.
11. Changes and Contact
We may update this policy. Material changes will be published here with a new "last updated" date. Medical Toxicology LLC 6421 N Tierra de las Catalinas, Tucson, AZ 85718, United States Questions about this policy: medicaltoxic.com/contact-us
Terms and Conditions
Do you want to see ToxLumen Terms and conditions?
Visit ToxLumen Terms and Conditions