Privacy Policy
Having trouble viewing the document? Download PDF
Google API Services Data Usage Disclosure
Data Accessed
Braver's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
The Google information Braver accesses depends on the features you or your organization enable:
Google authentication: When you sign in with Google, Braver accesses your name and email address to identify your account and personalize your experience.
Google Workspace Calendar integration: When a Google Workspace administrator installs and connects the Braver app for an organization, Braver accesses calendar-list information and calendar events for authorized accounts in that organization. Calendar event data can include calendar and event identifiers, event timing, status, and other event details returned by Google Calendar that are needed to synchronize and display schedules.
Braver does not use the Calendar integration to access Google contacts, Drive files, Gmail messages, or other Google Workspace data outside the permissions described above.
Data Usage
The information we collect through Google authentication is used exclusively for the following purposes:
Account Authentication: Your email address is used to securely authenticate your identity when you sign in to our patient portal or application.
Account Management: Your name and email are used to create and manage your account, personalize your experience, and communicate with you about your care and appointments.
Service Delivery: This information enables us to provide you with access to our healthcare services, schedule appointments, and maintain your patient records.
Calendar Synchronization: For organizations that enable the Google Workspace Calendar integration, Braver reads calendar events to display schedules and help identify availability or scheduling conflicts. Braver also creates, updates, and deletes Braver-managed appointment events in Google Calendar.
Data Handling and Security
We implement the following practices to protect your data:
Data accessed through Google authentication is transmitted securely using industry-standard encryption protocols.
Google account and Calendar data are stored and processed only as needed to provide the enabled Braver features, and access is restricted to authorized personnel and systems.
We do not sell, rent, or share your information collected through Google authentication with third parties for marketing purposes.
Your data is retained only as long as necessary to provide our services and comply with legal and regulatory requirements, including HIPAA regulations for protected health information.
A Google Workspace administrator can revoke Calendar access by uninstalling the Braver app, and an authorized Braver administrator can disconnect the integration in Braver Settings.
Google Data Retention and Deletion
Braver retains synchronized Google Calendar event data and synchronization state only while an organization's Google Workspace integration is connected and the data is needed to provide scheduling features.
When an authorized Braver administrator disconnects the Google Workspace integration, Braver immediately deletes synchronized Google Calendar events and synchronization state from its active systems. Encrypted database backups can retain deleted copies for up to 30 days before they expire through Braver's normal backup lifecycle.
Braver may retain limited connection and audit metadata as needed for security, support, and legal compliance. An organization administrator or Google user can request deletion of remaining Google-derived data by emailing support@bebraver.com.
Disconnecting or uninstalling Braver revokes future access but does not automatically remove Braver-managed events already stored in Google Calendar. Those events can be deleted in Google Calendar or removed through Braver before disconnecting.
Limited Use Disclosure
Braver's use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements. This means:
We only use the data for the purposes explicitly stated in this privacy policy.
We do not transfer this data to others unless necessary to provide or improve our services, comply with applicable law, or as part of a merger, acquisition, or sale of assets with your consent.
We do not use this data for serving advertisements.
We do not allow humans to read this data unless we have your affirmative agreement for specific purposes (such as responding to your inquiry), it is necessary for security purposes, or to comply with applicable law.
Braver Chrome extension
The Braver Chrome extension is provided by Braver Management LLC. It lets authorized Braver staff compose private messages and attach files in Gmail, while storing the protected content in Braver and sending a secure link through Gmail. It also lets staff save downloaded documents and printed PDFs to a patient’s chart after confirming the patient.
Information processed
The extension uses your existing Braver sign-in session and receives your staff account name and email address to show connection status. When you use secure messaging, it processes the selected recipient's email address, the message you enter, and files you choose or drop into the secure editor, including their names, types and sizes. Messages and attachments may contain health information or other sensitive information.
When you turn on Secure message, the extension reads authored text from that active Gmail compose and transfers it as plain text to its private editor. The text is removed from the current Gmail body only after the private editor acknowledges receipt. It also checks for existing attachments and inline images, which must be added inside the secure editor. Gmail may already have saved an earlier copy of imported text; the extension cannot remove Gmail’s draft history. It preserves your ordinary signature and quoted thread without importing them into Braver. It does not scan your inbox, request Gmail API access or collect your browsing history.
Use and sharing
Protected text, recipient information and file metadata are sent over HTTPS to the Braver application selected by your organization. Files upload over HTTPS to Braver's private Amazon S3 storage. Braver stores the message and attachment references and may associate the communication with an existing patient record when the recipient email uniquely matches that record. Braver's service providers process data to operate these features under its applicable privacy practices.
Gmail receives the ordinary email subject, signature and thread content, a public notice, and the secure URL. Text written in the secure editor, filenames and file contents are not inserted into the Gmail draft. Imported text was previously present in Gmail and may remain in Gmail’s earlier saved drafts. Anyone who possesses a valid secure URL can open its message and attachments until the link expires. Do not forward these links. This feature does not provide end-to-end encryption or independently verify the recipient's identity.
The extension contains no advertising or browsing-analytics SDK. Its message and file processing supports the secure-message workflow. The public email logo is a static image without a recipient or message identifier in its URL.
Saving downloads and printed pages to charts
Download matching is on by default while you are signed in to Braver, and you can turn it off in the extension popup. Download and website access are requested when you install the extension. While matching is on, the extension checks new downloads in your normal (non-incognito) windows. Unless you turn on "Catch every download", it checks only document-type files and ZIP record exports, and never files from Braver itself. For each checked download it sends the chosen Braver application the file's name and type, plus the address of the page that started the download without its query string. It also sends that page's title and an excerpt, at most 3,000 characters, of the page's text near patient labels such as name and date of birth. Braver uses an AI model, through its AI service provider, to read patient names and dates of birth from this information. It then searches your organization's Braver patients and returns possible matches (name, date of birth, sex, status and photo) for you to confirm.
When a download matches, or when "Catch every download" is on, the extension re-reads the file from its website using your existing session on that site, and cancels Chrome's copy. You choose to save it to a patient's chart, download it to your computer, or discard it. Saved files upload over HTTPS to Braver's private storage as private chart files; they are not shared with the patient. Files waiting for your decision are kept in local extension storage for at most one hour and are removed when you save, download or discard them. Downloads that do not match are left to Chrome. The extension does not record your browsing or the pages it checks.
The extension also adds a "Save to Braver" destination to Chrome's print dialog. When you choose it and print, Chrome gives the extension the printed PDF, and the extension sends Braver the same details as for a download (the page's title, its address without the query string, and the excerpt near patient labels) to suggest the patient, then opens the same window. Printing to any other destination is not seen by the extension.
Local storage, retention and deletion
The selected Braver application address is saved in Chrome's local extension storage. Temporary compose identifiers, tab/frame identifiers, recipient information and preparation identifiers can be held in Chrome session storage to coordinate a send. Protected Gmail drafts and files selected for secure messages stay in memory until sent and are lost when the draft or browser is closed or refreshed. They are not saved as recoverable private drafts.
Sending or attempting to send can create records or upload files in Braver. Removing a file from an unsent draft, discarding a draft, or uninstalling the extension does not delete data that has already reached Braver. Secure links currently expire after seven days; link expiry does not mean the underlying clinical record or attachment has been deleted. Retention and deletion follow Braver's applicable privacy practices and record-retention obligations. Contact support@bebraver.com to ask about access, retention or deletion.
Rounds connection
Inside Braver's embedded rounds page in Google Meet, the extension can reuse your existing Braver staff session to obtain a short-lived, rounds-only connection. The connection is delivered only to that Braver iframe and held in memory; it is never sent to Google Meet, put in a URL, or stored in extension storage. A signed-out user must still complete Braver sign-in.
Limited Use
The Braver Chrome extension’s use and transfer of user data complies with the Chrome Web Store User Data Policy, including its Limited Use requirements.
Text Messaging Privacy Notice
No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.