Privacy Notice

Draft for review by Extern Technology LLC SPC before release.

What this website receives

This website delivers web pages. It does not receive your Shafafiya credentials, your transaction files or Shafafiya responses. Like any web server, it records standard request information such as IP addresses.

When you save a new connection, and when Shafafiya accepts a facility's credentials, eCMessenger Client sends that facility's license to this website. The publisher stores the license with the first and last dates the facility logged in, and the facility's plan and its start and end dates. It stores nothing else about the facility, its users or its patients.

What stays on your computer

Your facility settings and Shafafiya credentials are saved by eCMessenger Client in your Windows profile. Passwords are encrypted with Windows DPAPI, so only your Windows account on that computer can read them. Diagnostic logs record events and result codes. They do not record passwords or file contents.

What goes to Shafafiya

The files you submit, and your credentials, are sent from your computer directly to the Shafafiya service over an encrypted connection.

What your browser keeps

Your browser keeps a security key that cannot be copied out of it, your selected facility and the client port. Operation results are kept in memory and are cleared when you close the tab.