Forty Medical Systems
Privacy policy
This privacy policy describes how the Forty Medical Systems Google Workspace Marketplace app (the “app”), operated by EMC Enterprises, LLC doing business as Forty Medical Systems (40MS), accesses, uses, stores, and shares Google user data. It applies to the app's use of Google APIs for Clients of CEMS, the 40MS platform. It matches the practices disclosed on the app's Google OAuth consent screen.
It also covers the 40MS test text messaging program, in Text messages below.
Who the app is for
The app is installed domain-wide by a Client's Google Workspace super admin during CEMS onboarding. It is set to Admin Only Install. End Users do not sign in to the app with their own Google accounts for Drive access.
How the app accesses Google user data
After a domain-wide install, the Platform acts only as the licensed Workspace user
platform@ at the Client's domain. It requests a single Google API scope:
https://www.googleapis.com/auth/drive (full Drive). It does not request
Gmail, Calendar, Admin SDK, or other scopes.
The app reads and writes files and folders in the Client's shared drives that the Platform manages (for example Patients and Practice). It never reads or writes a User's own My Drive (the Human Drive).
How the app uses Google user data
Google user data from Drive is used only to:
- Create and maintain shared drives and Patient folders in the Workspace standard layout
- File Practice documents (Patient Plans, lab sheets, signed form copies, faxes, uploads, templates) into those folders
- Show live Drive files in CEMS where the product surfaces them
- List deviations from the Workspace standard in the conformance check
- Count items in shared drives so the Platform can split a full Patients drive
Google user data is not used for advertising, retargeting, credit decisions, or to train or improve a machine learning or artificial intelligence model.
How the app stores Google user data
Practice documents remain in the Client's Google Workspace. The Platform links folders and files by Drive ID. Application logs record Drive IDs and sizes, never Patient names, folder names, or file names.
If Drive is briefly unreachable when a User uploads a file, the upload is held in encrypted storage inside that Practice's own CEMS environment (its Tenant) and moved into Drive when the connection returns. A queued upload waits up to 7 days. After that, the Superadmin is notified and new uploads are refused until Drive is available again. Queued files are not kept as a permanent copy of Google user data outside Drive beyond that window.
How the app shares Google user data
Google user data obtained through the app is not sold or shared with third parties for advertising, data brokerage, or resale. Access stays inside the Client's Workspace and the Client's own CEMS Tenant, except where a transfer is required by law or needed for security (for example investigating abuse). 40MS staff do not read Google Drive file contents through this app in the ordinary course of providing the product.
Limited Use
The use of information received from Google Workspace scopes will adhere to the Google User Data Policy, including the Limited Use requirements.
That statement follows Google's Google Workspace user data and developer policy and the Google API Services User Data Policy.
Offboarding
When a Tenant's export window ends, the Platform stops all Drive calls for that Tenant. The Client's super admin uninstalls the app. The Client's Google Workspace is left untouched: every file and folder remains.
Text messages
This section covers the Forty Medical Systems test messages program, the text messages (SMS) 40MS sends to its staff and invited testers who ask to receive them, to test CEMS texting. It never texts a Practice's Patients. The program's text messaging terms say what messages you get, how often, and how to opt out.
For the program, 40MS collects:
- Your mobile number
- Your consent to receive texts: when you gave it and how
- Your email address and the email you sent to join
- Your opt-out and HELP requests
- The messages sent to and from your number, and whether they were delivered
40MS uses this only to run the program: to send test and sample messages, reply to you, honor an opt-out, and show your consent if a carrier asks. Sample messages use made-up details, never real Patient information. Don't send health information by text.
Your mobile number and your consent to receive texts are not sold, rented, or shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are shared only with the companies that deliver the messages (Amazon Web Services and wireless carriers), and only to deliver them, or where the law requires it. Google, 40MS's email provider, stores the email you sent to join, only so 40MS can keep it as the record of your consent.
The email you sent to join is kept in 40MS's Google Workspace mailbox. The rest of this data is stored in 40MS's own Amazon Web Services account in the United States. Only the people who run the program can see it. 40MS keeps your consent and opt-out records while you are in the program and for at least six months after you opt out, so it can keep honoring the opt-out.
Reply STOP to any message to stop texts, or HELP for help. If how 40MS handles text message data changes, 40MS updates this section and the date at the top. Questions about text messages: support@40medical.com.
Changes
If how the app uses Google user data changes, 40MS will update this policy and obtain any consent Google and applicable law require before using Google user data in a new way.
Contact
Questions about this policy: EMC Enterprises, LLC / Forty Medical Systems, support@40medical.com.