Privacy Policy
Last updated: 11 décembre 2025
At ClinIAMind, we take the protection of your personal data very seriously. This privacy policy describes how we collect, use, store, and protect your information when you use our platform.
ClinIAMind is the data controller for personal data collected through this platform, in accordance with the General Data Protection Regulation (GDPR).
For the data controller's contact details, please see our: Legal Notice
We collect different types of data to provide our service:
Account Data
- • First and last name
- • Professional email address
- • Password (encrypted)
Usage Data
- • Login and activity logs
- • Preferences and settings
- • Anonymized usage statistics
Content Data
- • Uploaded PDF documents
- • Annotations and comments
- • Generated reports
Your personal data is used to:
- Provide, maintain, and improve our services
- Personalize your user experience
- Process your documents with our AI technology
- Communicate with you regarding your account
- Ensure security and prevent fraud
We process your data on the following legal bases:
- Contract performance: to provide the service you have subscribed to.
- Consent: for certain specific processing (non-essential cookies, marketing communications).
- Legitimate interest: to improve our services and ensure their security.
We retain your data only for as long as necessary for the purposes for which it was collected:
- • Account data: for the duration of your subscription + 3 years after closure
- • Documents and annotations: for the duration of your subscription
- • Connection logs: 12 months
We implement appropriate technical and organizational measures to protect your data:
- Encryption of data in transit (TLS) and at rest (AES-256)
- Secure authentication and access management
- Regular backups and disaster recovery plan
- Periodic security audits and penetration testing
Your data is hosted on secure servers located in the European Union and the United States. Our hosting providers comply with the highest security standards.
Data transfers outside the EU are governed by standard contractual clauses approved by the European Commission.
Under GDPR, you have the following rights over your personal data:
Right of access
Obtain a copy of your personal data
Right to rectification
Correct inaccurate or incomplete data
Right to erasure
Request deletion of your data
Right to portability
Receive your data in a structured format
Right to object
Object to certain processing
Right to restriction
Restrict the processing of your data
You may also lodge a complaint with the relevant data protection authority.