Privacy Notice

Last updated November 10, 2026

Who we are

Monisha Sharma, an individual based in the United States, operates Analytics & Insights - AI Engine and is the data controller for the personal data described here.

Your data files

Files you analyze are processed inside your browser and saved workspaces are kept in your browser's storage. We do not upload or store your data files. When you import from a cloud-storage link, the file passes through our server only to reach your browser and is not kept. When you use the Ask-your-data assistant, computed summaries (not your raw rows) are sent to an AI model provider to generate the answer.

Patient and clinical data

Use de-identified or synthetic patient data whenever possible. Remove direct identifiers such as names, full addresses, phone numbers, email addresses, government identifiers and medical record numbers before analysis. Review rare dates, locations and clinical details because they can indirectly identify a person.

Local browser processing means we do not receive or store your uploaded patient files. However, this alone does not make the Service HIPAA compliant, and we do not represent that a Business Associate Agreement is in place. Do not upload protected health information unless your organisation has approved this use and completed its own legal, privacy and security assessment. Saved workspaces remain in the browser on that device, so device access and shared computers need appropriate controls.

Ask Your Data and AI Insights send computed aggregate summaries, not raw rows, to an AI model provider. Review those summaries for indirect identifiers before using them. Clinical and survival outputs are analytical estimates, not diagnoses, medical advice or substitutes for qualified clinical review.

Personal data we collect and why

• Account details (email address, name if provided by Google or Lovable sign-in, login credentials) — to create your account and provide the Service (contract).
• Plan and purchase status (subscription status, renewal date, one-time analyses used) — to unlock paid features (contract).
• Early Access requests (name, email and optional industry) — to respond to your request and ask for release feedback with your consent.
• Free-analysis allowance (account ID and opaque dataset identifiers, never file contents) — to provide three free full analyses and remember which datasets you unlocked.
• Private account administration (registered email, registration and latest sign-in dates, email-confirmation status, free-analysis claims and payment status) — visible only to authorised application administrators to operate accounts and monitor allowances. All signed-in users receive three free analyses without an approval request. Uploaded files and data rows are not included in this account directory.
• Visitor-interest events (successful sign-ins, free-analysis starts and completed full analyses, without names, emails, filenames, dataset identifiers or data rows) — to understand release interest and weekly analysis usage (legitimate interests, subject to applicable consent and browser privacy choices). These describe visits, not identified people.
• Questions sent to the assistant — to answer them (contract).
• Technical data (IP address, device and browser details, error logs) — for security, fraud prevention and fixing problems (legitimate interests).

Who we share it with

• Service providers that host the app, run sign-in and the database, and provide the AI model.
• Paddle, our Merchant of Record, for selling the product, subscription management, payments, tax compliance and invoicing. Paddle processes your payment details under its own privacy notice.
• Professional advisers (legal, accounting) where needed.
• Authorities where required by law.

Retention

We keep account and purchase records while your account is active and as required for tax and accounting, then delete or anonymize them. Technical logs are kept for a short period.

Your rights

Depending on where you live (including under US state laws such as the California Consumer Privacy Act), you may have the right to access, correct, delete or obtain a copy of your personal data, and to opt out of its sale or sharing. We do not sell personal data. To exercise these rights, reply to any email from us or use the contact details on this website; we will not discriminate against you for doing so.

Security

We use encryption in transit, access controls and the principle of keeping your data files on your own device.

Cookies and local storage

We use only essential browser storage to keep you signed in, remember unlocked analyses and save your workspaces. We do not use advertising cookies.