This policy explains how AnalystAI ("we") handles personal data on AnalystAI Health. It covers visitors, account holders, and the content of documents uploaded to the service.
What we collect
- Account data: your email address and sign-in times.
- Contact form data: the name, email, organisation and message you send us.
- Documents you upload and the values extracted from them. Lab reports can contain health data about other people. You are responsible for having a lawful basis to upload them.
- Technical data: IP address, used to limit abuse of sign-in and forms.
Why we use it
- To provide the service: sign you in, process your documents and show you the results.
- To reply to your enquiry and, if you ask, set up a pilot.
- To keep the service secure.
For uploaded documents, we act on your instructions as a data processor.
Who processes it for us
We use service providers for hosting, database and file storage, email delivery, and OCR and AI processing of uploaded documents. Some processing may take place outside the EU or Turkey. Before any real patient data is processed we name these providers, their locations and the transfer safeguards in the data processing agreement. We do not sell personal data and do not use uploaded documents to train AI models.
How long we keep it
- Uploaded documents and extracted results: 30 days after upload, or sooner if you delete them.
- Patient records (name, birth date, patient number): deleted at the nightly clean-up once no report is linked to them and they are more than 30 days old.
- Database backups: kept for at most 30 days, then deleted. Something you delete can remain in a backup until that backup expires.
- Account data: until you delete your account (Account page) or ask us to.
- Contact form messages: up to 24 months.
Your rights
Under the GDPR and Turkey's KVKK you can ask to access, correct, delete or export your personal data, and object to its use. Email privacy@analystai.ai. You can also complain to your data protection authority.
Cookies
We do not use advertising or tracking cookies. Your browser stores your sign-in session locally so you stay signed in.