Privacy Policy

We collect the following categories of personal information:

Information you provide directly:

• Identifiers: Name, email address, organization, and professional role, when you contact us or create an account.
• Account credentials: If you sign in with a third-party identity provider (such as Google), we receive profile information permitted by that provider. We do not receive your third-party password.
• Communications: Messages, demo requests, support inquiries, and other information you send us.

Information collected automatically:

• Usage data: Pages visited, features accessed, interaction data, and general product usage patterns.
• Device and technical data: IP address, browser type, operating system, device identifiers, and referring URLs.
• Analytics data: Aggregated behavioral data collected through analytics tools, where enabled.

Information from third parties:

• Identity providers: Authentication and profile data from providers you choose to use.
• Calendly: If you schedule a demo, scheduling information is processed by Calendly under its own privacy policy.

We use personal information to:

• Provide, operate, maintain, and improve the Services.
• Create and manage accounts and authenticate users.
• Respond to inquiries, demo requests, and support needs.
• Send service-related notices, security alerts, and policy updates.
• Send optional marketing communications where permitted by law and where you have consented, when applicable.
• Analyze usage to improve performance, reliability, and user experience.
• Detect, investigate, and prevent fraud, abuse, or unauthorized activity.
• Comply with legal obligations and enforce our agreements.

Where required by applicable law, we rely on appropriate legal bases such as contract performance, legitimate interests, legal obligation, and consent.

We do not sell your personal information. We share personal information only as described below:

• Service providers: Vendors that process data on our behalf (for example, hosting, email, analytics, and customer support), subject to contractual obligations.
• Third-party integrations: Providers you choose to use with the Services, such as identity providers or scheduling tools.
• Business transfers: In connection with a merger, acquisition, financing, or sale of assets, subject to appropriate notice where required.
• Legal requirements: When required by law, regulation, legal process, or to protect rights, safety, and security.
• With your consent: For any other purpose disclosed at the time of collection.

We use cookies and similar technologies to operate the Services, remember preferences, and understand how the Services are used. These may include:

• Essential cookies: Required for core functionality, such as authentication.
• Analytics cookies: Used to collect aggregated usage statistics where enabled.
• Preference cookies: Used to remember settings across sessions.

You can control cookies through your browser settings. Disabling essential cookies may affect how parts of the Services function. Where required, we will request consent before placing non-essential cookies.

We retain personal information for as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account or request deletion, we will delete or anonymize personal information within a reasonable period, unless a longer retention period is required by law.

Aggregated or de-identified data may be retained for analytics, security, and product improvement purposes.

We implement administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction. These measures may include encryption in transit, access controls, and security monitoring.

No method of transmission or storage is completely secure. If we become aware of a data breach affecting your personal information, we will notify you as required by applicable law.

The Services are not directed to individuals under 18. We do not knowingly collect personal information from anyone under 18. If you believe we have collected information from a minor, contact us at contact@medisight.ai and we will take steps to delete it.

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal information, and to receive a portable copy of your data. You may also have the right to withdraw consent where processing is based on consent, and to lodge a complaint with a supervisory authority.

California residents may have additional rights under applicable state privacy laws, including the right to know, delete, correct, and limit use of sensitive personal information. We do not sell personal information for cross-context behavioral advertising.

To exercise your rights, email contact@medisight.ai. We may need to verify your identity before processing a request.

The Services may process health-related or clinical information submitted by authorized users or their organizations, such as laboratory results, documentation, or workflow data. This information may be treated as sensitive personal information under applicable law.

Medisight is a clinical decision-support and analytics platform. It is not intended to diagnose, treat, cure, or prevent any disease, and it does not replace professional medical judgment. Outputs are intended for review by qualified healthcare professionals.

Organizational customers may have separate agreements governing protected health information. Where Medisight acts as a business associate or subprocessors are involved, processing will be governed by applicable contractual terms in addition to this policy.

Medisight is based in the United States. If you access the Services from outside the United States, your information may be transferred to, stored in, and processed in the United States or other countries where we or our service providers operate.

Where required, we use appropriate safeguards for international transfers, such as Standard Contractual Clauses or equivalent mechanisms.

We may update this Privacy Policy from time to time. When we make material changes, we will update the date at the top of this page and, where required, provide additional notice. Your continued use of the Services after an update becomes effective constitutes acceptance of the revised policy.

Questions about this Privacy Policy or our data practices may be sent to contact@medisight.ai.

For privacy rights requests, include "Privacy Request" in the subject line and enough information for us to verify your identity.