Privacy Policy

Last updated: [DATE]

Placeholder text.This page is a template and has not been reviewed legally. Replace it with the operator's actual information before running a public instance.

1. Controller

[Name and contact details of the controller, data protection officer if applicable.]

2. Data we process

Account data: email address, name, password hash, role and login timestamps.
Uploaded images: CT series you select during upload. When “Anonymize before upload” is enabled, direct identifiers and private DICOM tags are removed in your browser before transmission.
Derived data: segmentations, meshes, edits and processing logs.
Technical data: session cookie and CSRF cookie required for signing in.

3. Purposes and legal basis

[Describe purposes (providing the service, security) and legal bases (e.g. Art. 6(1)(b) GDPR, Art. 9 GDPR for health data).]

4. Processors and transfers

[List hosting providers and GPU processing providers (e.g. Modal) and any transfers outside the EU.]

5. Retention

[Retention periods. Studies can be deleted at any time from the study list; deleting your account removes all studies.]

6. Your rights

Access, rectification, erasure, restriction, portability and objection; complaint to a supervisory authority.

7. Cookies

Only strictly necessary cookies are used (session and CSRF protection). No tracking or analytics.