PurpleTools Athena — Privacy Policy
Effective date: September 1, 2026
PurpleTools Athena is a Chrome extension that operates within the Athena EHR interface to streamline clinical workflows. It does not collect, transmit, or store patient data, personal health information, or browsing history on Purple Tools Medical servers. All processing occurs locally in the browser. ExtensionPay receives limited account and subscription information solely to provide trials, payments, login, and license verification.
1. Scope
This policy describes how the PurpleTools Athena Chrome extension ("PurpleTools Athena," "the extension," "we," "us") accesses, uses, stores, and shares information.
2. Information Processed
| Category | How it's used | Where stored/processed |
|---|---|---|
| EHR page content (Athena) | Read locally within the browser tab to identify workflow context and surface relevant tools; used only to provide in-page functionality | Processed entirely in the browser; never transmitted to Purple Tools Medical servers |
| User preferences and settings | Extension configuration choices made by the user (e.g., enabled modules, display preferences) | Stored locally via Chrome extension storage; not transmitted externally |
| Consent record | Whether the user accepted the in-extension data-use disclosure, its version, and acceptance time | Stored locally via Chrome extension storage |
| Trial/account/subscription info | ExtensionPay may process an access key, install date, email (if supplied), trial start date, paid status, subscription status, plan details, and cancellation date — to provide trial, payment, login, and license verification | Sent over HTTPS to ExtensionPay; cached locally in Chrome extension storage for verification |
| Payment information | Entered directly on pages hosted by ExtensionPay and Stripe | We never receive or store full payment-card data |
3. How Information Is Used
EHR page content is read locally and only to provide the workflow tools the extension offers. No patient data, clinical notes, diagnosis codes, or other health information is transmitted to Purple Tools Medical. Account and subscription data is used only to verify trial or paid access, process subscriptions, and respond to support requests.
4. Information Sharing
We do not sell data. We do not share EHR content, patient information, browsing activity, or personal health information with ExtensionPay, Stripe, advertisers, or data brokers. Limited account, subscription, and payment data goes to ExtensionPay and Stripe only as needed for payment and license services, or as required by law.
5. HIPAA Considerations
PurpleTools Athena is a browser-based tool that assists clinicians with EHR navigation. It does not store, transmit, or process protected health information (PHI) on Purple Tools Medical servers. Clinicians remain responsible for ensuring their use of browser extensions complies with their organization's HIPAA policies and any applicable business associate agreements.
6. Advertising and Profiling
None. No personalized ads, retargeting, creditworthiness assessments, or unrelated profiling of any kind.
7. Data Retention
EHR page content is processed transiently and is not retained by us. User preferences and consent status remain in local Chrome storage until changed, cleared, or the extension is removed. ExtensionPay and Stripe retain account and payment data per their own policies.
8. Security
The extension uses Chrome extension APIs and communicates with ExtensionPay over HTTPS. No storage or transmission method is 100% secure. We take reasonable steps to protect the information we handle.
9. Children's Privacy
PurpleTools Athena is intended for use by licensed clinicians and healthcare professionals. It is not directed at children under 13, and we do not knowingly collect information from children.
10. Changes to This Policy
We may update this policy from time to time. Material changes will be noted with a revised effective date. Continued use of the extension after changes constitutes acceptance of the updated policy.
11. Contact
Questions about this policy may be directed to: [email protected]