Privacy Policy
Last updated: 2025-01-01
Data Controller
SurgAI is developed as a clinical decision-support tool. The data controller is the respective hospital unit.
Data Collected
We collect only the minimum data necessary to provide the service: user account (email, name, role, hospital ID) and audit logs for security.
No Patient Data
Patient descriptions are sent directly to the AI service and are not stored in our database. AI contexts auto-expire after 30 days.
Your Rights
Under GDPR, you have the right to access, rectify, and delete your personal data. Contact your hospital administrator to exercise these rights.
Cookies
We only use strictly necessary cookies for session authentication. No analytics or marketing cookies are used.