Privacy Policy

1. Who We Are

CliniEasy (“we”, “our”, “us”) provides AI-powered medical report analysis for educational purposes. We operate at CliniEasy.com and related subdomains. This Privacy Policy explains how we collect, use, and protect information when our services are used.

2. Data We Collect

3. How We Use Data

• To process and analyze uploaded medical reports.
• To provide results, status notifications, and customer support.
• To maintain service integrity, prevent abuse, and enforce usage limits.
• To improve quality, reliability, and security of the service.
• For fraud prevention and troubleshooting.

4. Data Retention & Deletion

We operate with a privacy-first approach and do not retain uploaded files or analysis results on our servers beyond what is necessary for the session and secure processing. In-browser storage (e.g., IndexedDB) is used to keep reports locally on the device for user convenience; this data never leaves the device unless exported or shared by the user. Users can clear browser storage at any time to delete local data. Server-side logs are minimized and retained only as needed for security and compliance.

5. Security

• Transport security with industry-standard TLS.
• Isolated processing environments for file analysis.
• Principle of least privilege and regular security updates.
• Abuse, spam, and fraud prevention controls.

No security program can guarantee 100% protection. Users should avoid uploading highly sensitive documents unless necessary for analysis.

6. Cookies & Local Storage

We minimize tracking and favor privacy-preserving mechanisms. We may use:

• Essential cookies for session integrity and security.
• Local storage/IndexedDB to keep reports on-device for user access.
• A privacy-preserving fingerprint (“thumbmark”) to enforce quotas and prevent abuse.

Most browsers allow management of cookies and local storage. Clearing site data removes locally stored reports and preferences.

7. Sharing & Disclosure

• We do not sell personal data.
• Service providers may process limited data strictly to deliver functionality (e.g., payments, infrastructure).
• We may disclose information if required by law or to protect rights, safety, and integrity of the service.

8. Legal Basis for Processing (GDPR)

• Performance of a contract: delivering the requested analysis.
• Legitimate interests: service security, fraud prevention, and improvement.
• Consent: where applicable (e.g., optional details, certain cookies).
• Legal obligations: compliance with applicable laws.

9. Your Rights

Depending on jurisdiction, users may have rights to access, rectify, delete, or restrict processing of personal data, and to object or request portability. Because we do not create accounts or store analysis results server-side by default, some rights requests may not apply. For assistance, contact us as described below.

10. Payments

Payments are processed by trusted third parties. We receive confirmation and limited metadata required for fulfillment and support. Full payment credentials are not stored on our servers.

11. Children’s Privacy

Our service is intended for use by adults. If a parent or guardian believes a minor provided personal data, contact us to request deletion where applicable.

12. International Data Transfers

Infrastructure or service providers may be located in different countries. Where required, appropriate safeguards are used for cross-border data transfers.

13. Changes to This Policy

We may update this Privacy Policy to reflect improvements or legal requirements. Material changes will be indicated by updating the effective date above and may be communicated through the website.

14. Contact

For privacy inquiries or rights requests, contact: