Privacy Policy
Effective July 13, 2026
This Privacy Policy explains how Roam Imaging, Inc. (“we,” “us”) handles information in connection with SonoLink (the “Service”), a secure service that lets an ultrasound provider (“your Provider”) share ultrasound images with you. We built SonoLink to keep your images private and under your Provider’s control.
1. Information we handle
- Ultrasound images and videos that your Provider sends to the Service, and the small preview versions we generate so they load quickly on your phone.
- Limited study information such as the date of the session and the name of your Provider.
- Technical and access information such as your device and browser type, IP address, and timestamps when a share link is opened — used to keep the Service secure and to maintain a tamper-resistant access log.
- Account information for clinic staff who use the dashboard (for example, name, email, and organization).
2. How we use it
- To deliver your images to you and let you view and download them.
- To operate, secure, and troubleshoot the Service.
- To maintain an access log of who viewed shared images and when.
- To provide support and to bill clinics for their subscription.
We never sell, rent, or license your information or images; we never use ultrasound images to train AI or build any data product; and we never use them for advertising. Your images belong to you and your Provider — full stop.
3. How we protect it
- Images and data are hosted on infrastructure located in the United States.
- Images are encrypted at rest, and pages on sonolink.app are served over encrypted HTTPS connections.
- Access is restricted and logged. Each clinic’s data is isolated so one clinic cannot see another’s.
- Share links can be protected with a PIN, can expire, can have a view limit, and can be deactivated by your Provider at any time. The image links embedded in a shared page are short-lived and re-issued each time the page loads.
- We follow the principle of minimum necessary — for example, the patient’s name is not displayed on the public share page.
4. How long we keep it
The original, full-resolution diagnostic-format (DICOM) file is automatically deleted from the receiving server after a short window (currently 7 days). The smaller preview images and videos are retained so that your share link keeps working. You or your Provider can request deletion at any time, and your Provider can delete a study — which removes its images and disables its share links.
5. When we share it
We share information only as needed to run the Service:
- Your Provider, who uses SonoLink to share your images with you.
- Service providers who help us operate the Service — for example, cloud hosting and storage (DigitalOcean), subscription billing for clinics (Stripe), and email delivery of share links (Resend). These providers may process information only to perform services for us.
- Legal requirements, if we are required by law to disclose information.
6. Your choices and rights
You can ask us or your Provider for a copy of the images shared with you, or ask that they be deleted. Because your Provider controls your study, the fastest route is usually to contact them directly; you can also reach us using the details below.
7. A note on health information and HIPAA
SonoLink applies administrative, physical, and technical safeguards consistent with the HIPAA Security Rule. Whether SonoLink or your Provider acts as a “covered entity” or “business associate” under HIPAA depends on how your Provider uses the Service. Please direct specific HIPAA questions to your Provider.
8. Children
The Service is used by adults to receive their own imaging. It is not directed to children, and we do not knowingly collect information from children through the Service.
9. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date above.
10. Contact
Questions about your privacy? Email us at support@roamimagingutah.com. See also our Terms of Service.