Privacy notice
This notice explains what happens to information about you when you visit medirai.com or write to us. It is issued by MedirAI Inc. as controller. For questions or to exercise your rights, write to privacy@medirai.com.
What this site does not do
The site sets no cookies, uses no browser storage, runs no analytics and keeps no visitor access logs. Nothing is loaded from any third party.
Processing activities
| Activity | Purpose | Data | Lawful basis | Processor | Location | Transfer | Retention |
|---|---|---|---|---|---|---|---|
| Serving the site | Deliver the requested pages | IP address, user agent, requested URL (transient) | Legitimate interest (Art. 6(1)(f) GDPR) | Amazon Web Services EMEA SARL | CloudFront edges (worldwide); S3 origin in Milan (eu-south-1) | AWS Data Processing Addendum with Standard Contractual Clauses | None by MedirAI (access logs off) |
| DNS resolution | Resolve medirai.com to an address | Resolver address (not the visitor's; DNS-only record) | Legitimate interest | Cloudflare, Inc. | Global anycast network | Cloudflare DPA with SCCs | None by MedirAI |
| Contact by email | Answer requests sent to the contact addresses | What the visitor writes and their address; sometimes unsolicited health information | Legitimate interest; consent implied by sending | Google Ireland Limited (Google Workspace) | Google data centres (EU and non-EU) | Google Workspace DPA with SCCs | 24 months after the last exchange; unsolicited health information deleted after the reply and never forwarded into the clinical platform |
Your rights
Under the GDPR (Articles 15 to 22) and Quebec's Act respecting the protection of personal information in the private sector, you may ask for access to, correction of, or deletion of information about you, object to or restrict its processing, and receive it in a portable form. Write to privacy@medirai.com. You may also complain to your supervisory authority; in Quebec, the Commission d'accès à l'information.
Our assessment of this site's processing under Quebec's Act, including communication of information outside Quebec, is kept in our source repository as the Law 25 assessment and is available on request at privacy@medirai.com.
Health information
If you send us health information about yourself or another person by email, we will reply and then delete it. It is never entered into any clinical system through this route.
Changes
This notice is generated from our processing register and is republished whenever the register changes. The register is versioned in our source repository.