Reviewer privacy
How Vantora uses reviewer information
Notice version: DP-005 v0.5. This notice applies to up to six invited UK reviewers using separate, verified-email, 14-day, read-only access grants to the synthetic Vantora Practice demonstration.
Information used
- invited email address, name, optional organisation and reviewer-provided capacity;
- account, session, access-grant and security-event records;
- the exact confidentiality-agreement acceptance evidence; and
- typed feedback the reviewer chooses to submit, with its page and product context.
Why it is used
Vantora uses this information to control time-limited access, protect confidential product material, evidence agreement acceptance, investigate access or filing failures and assess attributable product-design feedback. The first wave does not use dictation, sticky notes, patient information or automated decisions about reviewers.
Who may process it
Authorised Vantora personnel and approved providers supporting hosting, database operation and restricted evidence filing may process the information. Provider-generated technical and security logs may also be retained under the provider's applicable service configuration and terms.
Retention
- unaccepted invitation records: 30 days after expiry;
- session records and one-way token hashes: 30 days after access ends;
- security-event and grant records: 12 months after access ends;
- typed feedback and its attributable review history: 12 months after the last review activity, unless a documented dispute, legal hold or separately approved company record requires longer;
- agreement and acceptance evidence: a proposed six years after agreement/access ends, subject to confirmation through the approved legal and privacy route; and
- failed filing or reconciliation records: only as long as needed to investigate and evidence resolution under the applicable category above.
Optional audio feedback supplement
REV-AUDIO-EXT v0.1
Audio feedback is optional. A recording remains in the browser for playback until the reviewer chooses Submit recording. Submitted audio is available only to authorised Vantora staff, is not transcribed and is deleted after 30 days. Reviewers must not include patient information, credentials or confidential third-party material.
Questions and rights
Questions and applicable data-protection requests can be sent to development@vantorahealth.com. Identity may need to be verified before a request is fulfilled. Vantora will route the request to the competent privacy owner and record the response.
Keep the review synthetic
Do not submit patient information, live credentials or confidential third-party material. If unexpected personal or confidential information is submitted, contact development@vantorahealth.com promptly so access can be restricted and the content assessed.