Privacy Policy
Last updated June 4, 2026
This Privacy Policy explains how Constellation handles information when a dermatology practice uses our software to document skin examinations. Constellation is a clinical documentation tool used by your healthcare provider; your provider remains the steward of your health record.
Information we process
On behalf of the practices that use Constellation, we process clinical photographs, lesion measurements, and the visit metadata a medical assistant or dermatologist records during an exam. We also process account information for the clinic staff who sign in.
We do not buy or sell personal information, and we do not use clinical photographs to train models without a separate, explicit agreement with the practice that controls that data.
How information is used
Information is used to provide the documentation service: capturing and aligning photographs over time, surfacing a reference layer the dermatologist may choose to consult, and maintaining the append-only clinical record the practice relies on.
Constellation surfaces and ranks; it does not diagnose. Every clinical decision remains with the dermatologist.
How information is shared
We act as a service provider (a business associate) to the practices that use Constellation. We share information only with the practice that owns it, with the practice's authorized EMR integration, and with the infrastructure providers needed to run the service under appropriate agreements.
We disclose information when required by law, to protect the safety of patients or staff, or with the explicit, per-photo consent recorded at the time of capture.
Consent
Consent in Constellation is recorded per photo, at the time of capture, never per account. A patient may decline or withdraw consent for a given photograph without affecting their care or their other records.
Security
Information is encrypted in transit and at rest. Access is restricted by role and scoped to the patient's own practice. Every access to identifiable health information is recorded in an append-only audit trail.
Your choices and rights
Because your provider controls your health record, requests to access, correct, or delete that record are handled by your provider. We support practices in fulfilling those requests. See the HIPAA Notice of Privacy Practices for the rights that apply to your protected health information.
Contact
Questions about this policy can be directed to your dermatology practice, or to Constellation at privacy@constellation.example. For requests involving your specific health record, please contact your provider directly.